Static task
static1
Behavioral task
behavioral1
Sample
d9f567cfb283a752df1fadb0c3e6740e4cbbaacf54a0a246dbb2860ff1d525ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d9f567cfb283a752df1fadb0c3e6740e4cbbaacf54a0a246dbb2860ff1d525ff.exe
Resource
win10v2004-20220812-en
General
-
Target
d9f567cfb283a752df1fadb0c3e6740e4cbbaacf54a0a246dbb2860ff1d525ff
-
Size
301KB
-
MD5
694849355b7064162f839dcf8c7b0090
-
SHA1
9a182e3166ac76448a1cb28dbcc5eee363bd2571
-
SHA256
d9f567cfb283a752df1fadb0c3e6740e4cbbaacf54a0a246dbb2860ff1d525ff
-
SHA512
334b39187c29182ee9154161b3f64d00e49dc84993fd82359f1505a91729bd2f0e8559aff5e0a17396d5274a4b5efbe16aa458b84e63bd5f808ecd3527cac121
-
SSDEEP
6144:pSeHsJaJiA+0pZAQdseV136waalkLz9RpTVMwMdR2Lv+XF3lJULGRcvh:DSSiA+0PAQd3b6l1ZTVMz0LCZULeMh
Malware Config
Signatures
Files
-
d9f567cfb283a752df1fadb0c3e6740e4cbbaacf54a0a246dbb2860ff1d525ff.exe windows x86
d05a583270cf5d56a4162818593bc8e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
RemoveDirectoryA
WriteFile
GetFileAttributesA
ResetEvent
CreateMailslotA
GetModuleHandleA
ReleaseMutex
DeleteFileA
HeapSize
SetLocalTime
VirtualProtect
GetDriveTypeW
SetLastError
MapViewOfFile
IsBadWritePtr
GetProcessHeap
GetLocaleInfoA
CancelIo
CreateDirectoryA
GetStdHandle
user32
PostMessageW
PeekMessageA
LoadImageA
GetCapture
GetWindowLongW
GetWindowTextW
DestroyMenu
LoadCursorA
DispatchMessageA
SetCursor
GetCaretPos
wsprintfA
SetFocus
filemgmt
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ