Static task
static1
Behavioral task
behavioral1
Sample
1d6b4b37a715065c3a62be7182642a0e744f85c2643510233d43656e85ebedb4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d6b4b37a715065c3a62be7182642a0e744f85c2643510233d43656e85ebedb4.exe
Resource
win10v2004-20220812-en
General
-
Target
1d6b4b37a715065c3a62be7182642a0e744f85c2643510233d43656e85ebedb4
-
Size
816KB
-
MD5
711d50b130524ae7ac2b906694a37eb0
-
SHA1
438b5f8618a83064d3e7712ee0fa9c4202ae3c4a
-
SHA256
1d6b4b37a715065c3a62be7182642a0e744f85c2643510233d43656e85ebedb4
-
SHA512
181add50e337636d83446b5e57af0695277186121de921a2aea35c2f38dab73bfcdd4780301e390dbfec7dcca1f9c4d0ebe403b9cf1b24fcec2d3dd089a333c3
-
SSDEEP
24576:TGSdxukif7e7UzojlgcKg8gSFoZy2yzAx+i7E:KSarje7Uz8laPCFhE
Malware Config
Signatures
Files
-
1d6b4b37a715065c3a62be7182642a0e744f85c2643510233d43656e85ebedb4.exe windows x86
f1b1a4871f2e4dd999e4e73748e4e804
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
GetDriveTypeW
GetVolumePathNameA
GetDriveTypeW
OpenMutexA
GetCurrentDirectoryW
GetFileSize
FindResourceW
GetDriveTypeW
GetDriveTypeW
MoveFileA
LoadLibraryA
VirtualAlloc
GetVolumeInformationW
lstrlenA
GetDriveTypeW
GetDriveTypeW
netshell
HrCreateDesktopIcon
HrGetIconFromMediaType
HrLaunchConnection
HrRenameConnection
Sections
.play Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.ydata Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ