Static task
static1
Behavioral task
behavioral1
Sample
d65c6eae42a5f9d9d20a3f0e95818acaafb34d52fc9547c3479e0cd4bf6e12d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d65c6eae42a5f9d9d20a3f0e95818acaafb34d52fc9547c3479e0cd4bf6e12d0.exe
Resource
win10v2004-20220901-en
General
-
Target
d65c6eae42a5f9d9d20a3f0e95818acaafb34d52fc9547c3479e0cd4bf6e12d0
-
Size
306KB
-
MD5
69efe7cab8661a4d8278ca78353443e0
-
SHA1
1c08e02e807e43b0d96dfb430e56d9c12a535e35
-
SHA256
d65c6eae42a5f9d9d20a3f0e95818acaafb34d52fc9547c3479e0cd4bf6e12d0
-
SHA512
6b65bb1fb7bb93798426d0226b4db2722399f74c9d929832b61685c5fe571d4373c637939cd73c11b1cd97838a8a355b9c27b969818470556855b79ed251432e
-
SSDEEP
6144:N2Wn5UN5+GxDdD/7y7wxXTemDwJO0vSaaa82ydRGECKdsBGOZNGu:ng5+GxdGkxXTeKwJO0vSJ2yiKd8G0Gu
Malware Config
Signatures
Files
-
d65c6eae42a5f9d9d20a3f0e95818acaafb34d52fc9547c3479e0cd4bf6e12d0.exe windows x86
4b908628db504bf140d02ee021e4297e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidCodePage
VirtualProtect
GetTickCount
GetFileAttributesA
LocalLock
GetFileAttributesA
SetLastError
GetCurrentProcess
MapViewOfFile
GetModuleHandleA
HeapFree
TlsGetValue
CreateDirectoryW
RemoveDirectoryW
FindResourceW
GetExitCodeThread
GetStringTypeA
SetPriorityClass
GetLocaleInfoW
SuspendThread
FindClose
user32
LoadCursorA
wsprintfW
DispatchMessageA
LoadStringW
GetWindowLongW
PostMessageW
SetFocus
IsDialogMessageA
LoadImageW
SetCursor
GetWindowTextW
PeekMessageW
IsWindow
msctf
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
TF_InitSystem
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE