Static task
static1
Behavioral task
behavioral1
Sample
d5ebc1dfd2b9f7e322dc802f390a8be0ecb17c667c90e68c75255ffef73d0721.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5ebc1dfd2b9f7e322dc802f390a8be0ecb17c667c90e68c75255ffef73d0721.exe
Resource
win10v2004-20220812-en
General
-
Target
d5ebc1dfd2b9f7e322dc802f390a8be0ecb17c667c90e68c75255ffef73d0721
-
Size
114KB
-
MD5
679ccf0d1d1f9d0a9cbc08edbdc6fd60
-
SHA1
adb96b5c3114628e6e3ff078da8f582159f1c9e2
-
SHA256
d5ebc1dfd2b9f7e322dc802f390a8be0ecb17c667c90e68c75255ffef73d0721
-
SHA512
cda37a5a1e2892343735b8c2ef2d15270633e600738da6d339ec3be8a57ad00f38e9180312408692dbfcd80120c6e0a6951734f9dede7640972a21fdbae62f3f
-
SSDEEP
3072:gLXV2sVB3kKs10c6h7xQGKq0BD6MURkZ5MX:5s5seph7xQG26MZ+
Malware Config
Signatures
Files
-
d5ebc1dfd2b9f7e322dc802f390a8be0ecb17c667c90e68c75255ffef73d0721.exe windows x86
cf0e5c83f2d5d9242cece9321f1a5765
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
FormatMessageA
WriteConsoleW
SetPriorityClass
lstrcpyW
GetLastError
IsBadStringPtrA
GetFileAttributesA
ReadFile
WriteConsoleW
HeapCreate
CloseHandle
FindResourceA
GetStartupInfoA
lstrlenW
GetCurrentDirectoryA
ReleaseMutex
GetFileSize
GetFileTime
GetModuleHandleA
IsValidLocale
msftedit
RichListBoxWndProc
RichComboBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
clbcatq
SetSetupSave
SetupOpen
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
SetupOpen
ComPlusMigrate
SetSetupSave
DllGetClassObject
SetupOpen
ComPlusMigrate
ComPlusMigrate
dsprop
CheckADsError
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE