676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba
- SHA256 425f38607739a4f62812fd0a2d93076b0e5888a0520835818440263d77615a0c
Static task
static1
Behavioral task
behavioral1
Sample
676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba.exe
Resource
win7-20221111-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
23 signatures
150 seconds
General
- Target 676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba
- Size 153KB
- Sample221213-sebb9aeh73
- SHA256 425f38607739a4f62812fd0a2d93076b0e5888a0520835818440263d77615a0c
- MD5 d3a303a840d90f9a5fa0166b22fb4f10
- SHA1 dd118431963880bcf7ebd3fe95310ec67c7cf249
- SHA512 62be764fe07095b83e2ba7b8ce5ff2f61dcb9f2ca3427b0d8bd8e575e8acc9db164310fb3ce868c64587633ff41629de408347139049be844d19a73385185580
- SSDEEP 3072:vKPW7/DQaEo9PAgY6Uu/yOjRY5mGJFULQhsbSw1YZGfQRSw4S:vKurURoPAgZUu/q5dHUs1NQBS
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba.zip 153KB
-
676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba.exe 234KB
676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba
- IMPHASH bdde5671a4674deff1164c98172a8747
- SHA256 676067b532e78f6965701213cb76e53d0eee8d0767dbbf4598fd0dd1e211deba
- MD5 5442e37b11909f7fe9d22be2a8153a06
- SHA1 aa902a962815eefe84f49249bba98868737da3bc
- SHA512 6f87bc4ef2c161ca2edce9d8967e3bb21ec8aa0b12ec1e74afe1f6b078ed01beac0b0d348c257ac4c1a110329fd83c0d7006155a079bcea27d7dffa3799b91fe
- SSDEEP 3072:FcyLjELANkmYhPY45rFO32MD5ZafPO6MPNTiKw2NiruKZWXgZbXJ2v40T2ui7le6:myULuYhPdccPO8KjNKYXigv9T2lhe6
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
15830
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LoadLibraryW
CallNamedPipeA
EnumSystemCodePagesA
EnumDateFormatsA
OpenMutexA
GetConsoleAliasesLengthA
CompareStringA
AreFileApisANSI
CreateFileW
EnumCalendarInfoExW
RequestWakeupLatency
GetConsoleAliasA
SetComputerNameA
GetSystemWindowsDirectoryW
GetModuleHandleA
GlobalUnlock
FindFirstVolumeMountPointW
CreateDirectoryExW
GetLogicalDriveStringsA
ReadConsoleInputW
FindNextVolumeMountPointW
SearchPathW
MoveFileA
GetCurrentDirectoryW
GetSystemDirectoryA
CreateMailslotA
CommConfigDialogW
GetProcAddress
LocalAlloc
DeleteTimerQueueTimer
SetHandleInformation
CreateJobObjectA
WriteConsoleOutputAttribute
FindFirstVolumeA
InterlockedIncrement
LocalFlags
CloseHandle
ZombifyActCtx
SetConsoleCtrlHandler
AddAtomA
GetThreadPriority
FreeEnvironmentStringsW
GetConsoleTitleW
SetVolumeMountPointA
GetSystemWindowsDirectoryA
ClearCommError
lstrlenA
CreateDirectoryExA
GlobalFindAtomA
TerminateJobObject
CopyFileW
lstrcpynA
BackupSeek
VerSetConditionMask
EnumSystemLocalesW
InterlockedFlushSList
WritePrivateProfileSectionW
GetStringTypeExW
GetFileAttributesW
ActivateActCtx
CopyFileA
WriteFile
ResetEvent
LocalCompact
LocalReAlloc
GlobalCompact
SetCommState
WriteConsoleInputA
DeleteAtom
FindResourceW
GetConsoleSelectionInfo
CreateIoCompletionPort
GetPrivateProfileStructA
ConvertThreadToFiber
EnumCalendarInfoW
GetConsoleMode
EnumCalendarInfoA
GetConsoleAliasExesLengthW
MoveFileW
InterlockedExchangeAdd
InterlockedDecrement
GetModuleHandleW
GetTickCount
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapSize
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
DeleteFileA
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
67KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ