Static task
static1
Behavioral task
behavioral1
Sample
63059d51ba084e0b3041ed04b87d2a269f413132925a06cec25a381dddaf5ba9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
63059d51ba084e0b3041ed04b87d2a269f413132925a06cec25a381dddaf5ba9.exe
Resource
win10v2004-20230220-en
General
-
Target
63059d51ba084e0b3041ed04b87d2a269f413132925a06cec25a381dddaf5ba9
-
Size
3.3MB
-
MD5
b57dd7f683ce98701dae5e35e6ec4379
-
SHA1
5b154501cfbc5660cb211b409da78ea350082a5e
-
SHA256
63059d51ba084e0b3041ed04b87d2a269f413132925a06cec25a381dddaf5ba9
-
SHA512
1658990f25c901dd39273d04554293ce63610ebe7e57a143d90230a10abf6f8da47698a143094546d5dcb812430de52663275c1d2d6f6cf233515bc3f04b7005
-
SSDEEP
98304:Xzl8TSV+TzW+qKBxAkIaO8TgBUr+WQD6H47694bqm:XGSUTeKBCBaOKgBKkm4Zqm
Malware Config
Signatures
Files
-
63059d51ba084e0b3041ed04b87d2a269f413132925a06cec25a381dddaf5ba9.exe windows x86
ae30fec88833a615ea963544241cb0c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiOutPrepareHeader
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
SetLastError
user32
GetSysColorBrush
gdi32
GetStockObject
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Create
wininet
InternetSetOptionA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.4MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ