Static task
static1
Behavioral task
behavioral1
Sample
d3bcef2ddbf9007d589c136cd135b3e885f39e67296fd52b141614cec1d6ca87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3bcef2ddbf9007d589c136cd135b3e885f39e67296fd52b141614cec1d6ca87.exe
Resource
win10v2004-20220901-en
General
-
Target
d3bcef2ddbf9007d589c136cd135b3e885f39e67296fd52b141614cec1d6ca87
-
Size
95KB
-
MD5
59f4bf76433f24e0adc714e54202631a
-
SHA1
a67ab2c817ab421001a5550803edb8c435ab3001
-
SHA256
d3bcef2ddbf9007d589c136cd135b3e885f39e67296fd52b141614cec1d6ca87
-
SHA512
6297f96e257b003e80bff56f9326127dc813d44a433fcd7cff7b896f4c7924ecfd0b57be5323bb6095f89daadfd09339034075caeda002151863ad8dfe829d8e
-
SSDEEP
1536:LM/o9FfwchGwFu9WFb2VSfTG6krQmH1PYhuQ1SLpxFe:2o91wcAwFu9WxY8C6kbmp1
Malware Config
Signatures
Files
-
d3bcef2ddbf9007d589c136cd135b3e885f39e67296fd52b141614cec1d6ca87.exe windows x86
22975e3b4e3958b00bcc149e0d2dccf2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyA
RegReplaceKeyA
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyExA
RegQueryValueW
RegCreateKeyExW
RegLoadKeyA
RegReplaceKeyW
RegEnumKeyA
RegDeleteValueW
RegEnumKeyW
RegQueryValueExW
RegQueryValueExA
RegLoadKeyA
RegQueryValueW
RegReplaceKeyW
RegOpenKeyA
RegEnumKeyW
RegLoadKeyA
RegEnumKeyA
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExW
RegEnumKeyW
kernel32
ExitThread
CopyFileExA
FindAtomW
ExitProcess
DeleteAtom
FatalExit
GetLocalTime
DeleteFileW
FindAtomA
DeleteFileA
CopyFileExW
GetCommandLineA
GetStdHandle
ReadFile
GetPriorityClass
OpenFile
FindAtomW
ExitThread
ExitProcess
AddAtomW
GetCPInfo
GetLocalTime
CopyFileExA
OpenFileMappingA
DeleteFileW
WriteFile
GetLastError
FatalExit
GetFileType
DeleteAtom
FreeResource
FlushFileBuffers
GetStdHandle
AddAtomA
FindAtomW
FindClose
GetLocalTime
ReadFile
CopyFileExA
OpenFile
OpenFile
GetPriorityClass
AddAtomA
ExitProcess
GetLastError
GetLocalTime
DeleteAtom
ReadFile
CopyFileA
GetFileType
OpenFile
AddAtomA
FlushFileBuffers
FindClose
GetFileTime
GetStdHandle
FindAtomA
DeleteFileW
user32
IsMenu
DrawTextW
GetWindowTextA
BeginPaint
LoadMenuA
DrawIcon
CalcMenuBar
GetMenu
GetWindowTextA
GetWindowTextLengthA
Sections
.3h65 Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.7eg2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1egcg Size: 45KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ageh Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.c8f9 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 803B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ