Static task
static1
Behavioral task
behavioral1
Sample
c643ec95d93f25d140d415a12a93b2ad75bbfdaeb8371156bc3107314200e14a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c643ec95d93f25d140d415a12a93b2ad75bbfdaeb8371156bc3107314200e14a.exe
Resource
win10v2004-20230221-en
General
-
Target
c643ec95d93f25d140d415a12a93b2ad75bbfdaeb8371156bc3107314200e14a
-
Size
813KB
-
MD5
56081b062fbc7a4aeef2807355923171
-
SHA1
5edb01843463df840a58a1a92f14a6441db751e0
-
SHA256
c643ec95d93f25d140d415a12a93b2ad75bbfdaeb8371156bc3107314200e14a
-
SHA512
cdec0fd71f4b0f856d12d7328639191c2080cda0c1ba676f227f95e97fa8096aab9d2e03d6cdadf89e06b640941ec7d4192663fb5d8f27c7aa1af47145bd4f9d
-
SSDEEP
24576:9anTRxSq0OgIT9Y+uwc4gLtiDy8J8JsROuES5Rud+9:MWOgITxZgLti+8JESHu
Malware Config
Signatures
Files
-
c643ec95d93f25d140d415a12a93b2ad75bbfdaeb8371156bc3107314200e14a.exe windows x64
d0b576aa1597bfc88eef11f7320a63ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
__WSAFDIsSet
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
wininet
FtpOpenFileW
psapi
GetProcessMemoryInfo
iphlpapi
IcmpSendEcho
userenv
LoadUserProfileW
uxtheme
IsThemeActive
user32
GetDC
gdi32
LineTo
comdlg32
GetSaveFileNameW
advapi32
AddAce
shell32
DragFinish
ole32
CoGetObject
oleaut32
SysStringLen
Sections
.MPRESS1 Size: 801KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE