Static task
static1
Behavioral task
behavioral1
Sample
d55ae3c9e2c5289f4de8a41f3f381280cfac9b9ce43b03b06b54a4d39e301137.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d55ae3c9e2c5289f4de8a41f3f381280cfac9b9ce43b03b06b54a4d39e301137.exe
Resource
win10v2004-20220901-en
General
-
Target
d55ae3c9e2c5289f4de8a41f3f381280cfac9b9ce43b03b06b54a4d39e301137
-
Size
474KB
-
MD5
6e6edba0557c674336d2b8fb25ee8450
-
SHA1
ce1d3cac06292f243b82cbf14e02745043b74612
-
SHA256
d55ae3c9e2c5289f4de8a41f3f381280cfac9b9ce43b03b06b54a4d39e301137
-
SHA512
cd065ba0fd3045f31737f12c228d301b7c0649240ba73977f0cc6406654d8e8f10c17a2d2497c70c15740d67468f7852da4eba0597a465732d7fd68649523bea
-
SSDEEP
1536:Y5DcbKcVyzMHyIMKlJ1fer9t9OSKiKp7i57USbAfqUNZ45E8dqjyHjWpfq0RCX:eKKGyqBM8feZtgVT7c/bAJZwh6yHaBRa
Malware Config
Signatures
Files
-
d55ae3c9e2c5289f4de8a41f3f381280cfac9b9ce43b03b06b54a4d39e301137.exe windows x86
f8fb89d5111b4672c6532b49c04e2917
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
ole32
CoCreateGuid
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE