Static task
static1
Behavioral task
behavioral1
Sample
67064f3e97f12a49bd956064a5ed98817d298d1f71f93457d8692606efbad7a7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
67064f3e97f12a49bd956064a5ed98817d298d1f71f93457d8692606efbad7a7.exe
Resource
win10v2004-20221111-en
General
-
Target
67064f3e97f12a49bd956064a5ed98817d298d1f71f93457d8692606efbad7a7
-
Size
54KB
-
MD5
2138827eeee7a7df1fad79bd5381b670
-
SHA1
7d8ee2411f62ef391fd00bde4f7e501456604145
-
SHA256
67064f3e97f12a49bd956064a5ed98817d298d1f71f93457d8692606efbad7a7
-
SHA512
126605b25140e1a824b3e4a60a73f9e8771f577498b269c6485595bfa3631a99ed9072f9aa80f5fc406e504198adbe85a35d7d7c663b6bb5b659f7c05e6edc39
-
SSDEEP
768:pXgWnU7jVGXJdOB+hkpdJOOkQMsfFJU7UF+5Ig6xmviqegFCE2k0u:pXEX6dM+ibJOObM4/xwegFI
Malware Config
Signatures
Files
-
67064f3e97f12a49bd956064a5ed98817d298d1f71f93457d8692606efbad7a7.exe windows x86
6946eb807692d7117752e80a98236a4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CloseHandle
lstrlenA
GetModuleFileNameW
CloseHandle
GetTickCount
GetConsoleTitleW
DeviceIoControl
GlobalSize
GlobalFlags
GetDriveTypeW
GetFileTime
WriteFile
GetCommandLineA
HeapCreate
Sleep
GetModuleHandleA
GetExitCodeProcess
DeleteFileA
GetStartupInfoA
user32
IsZoomed
DispatchMessageA
DestroyWindow
BeginPaint
DrawTextW
DispatchMessageA
GetParent
FillRect
SetFocus
PeekMessageA
CallWindowProcW
LoadImageA
GetWindowLongW
hhsetup
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
wininet
FtpCommandA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmmvilq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE