Static task
static1
Behavioral task
behavioral1
Sample
d45f13d9b8d3f20b6e13d8c4128c38567bf4f3a06e9ccd667397baa00911350e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d45f13d9b8d3f20b6e13d8c4128c38567bf4f3a06e9ccd667397baa00911350e.exe
Resource
win10v2004-20220901-en
General
-
Target
d45f13d9b8d3f20b6e13d8c4128c38567bf4f3a06e9ccd667397baa00911350e
-
Size
138KB
-
MD5
3ee9003d9f3e6ebf0c8fb2290ef4405f
-
SHA1
889bb5e101a64042ebd76f540e60781b367ec52f
-
SHA256
d45f13d9b8d3f20b6e13d8c4128c38567bf4f3a06e9ccd667397baa00911350e
-
SHA512
e3a22a5fb452a8ff46caf7f6f437eacebe98a69957e619de7f0e03f965284fd887a15fd5a645f74b5cfb3dbb5ff9b5010b4586d8db305927e83eed4f88f881f1
-
SSDEEP
3072:WD9YyCvd55GbOksbqgsCywBtzMNFQrEqMfdAkgMxNPk30ifId7z:WJYycd5aGnywBdMvjVB/xNPC0iW7z
Malware Config
Signatures
Files
-
d45f13d9b8d3f20b6e13d8c4128c38567bf4f3a06e9ccd667397baa00911350e.exe windows x86
08045aeb187eed824c7f493b1d098bed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
oleacc
LresultFromObject
ole32
StgOpenStorage
CoUninitialize
CoCreateInstance
CoFileTimeNow
CoInitialize
kernel32
DeleteFileW
GlobalReAlloc
IsDBCSLeadByte
DisableThreadLibraryCalls
SearchPathW
GlobalFree
SetCurrentDirectoryW
GetShortPathNameW
SetErrorMode
FindResourceW
SetEnvironmentVariableW
GlobalDeleteAtom
GetCurrentDirectoryW
UnlockFile
LockFile
WriteFile
GetVolumeInformationW
EnumResourceNamesW
SetFileTime
FindFirstFileW
FindNextFileW
IsDBCSLeadByteEx
SetFileAttributesW
GetDriveTypeW
GetFileSize
ReadFile
GetACP
ExitProcess
SetFilePointer
GetFileTime
CloseHandle
GlobalSize
LoadResource
MoveFileW
FindClose
GetLocalTime
GlobalUnlock
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ