Static task
static1
Behavioral task
behavioral1
Sample
d1e3cae787696a04c29d20bf77448ebd925f49f3d46c9148f293fa8b09b0d219.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1e3cae787696a04c29d20bf77448ebd925f49f3d46c9148f293fa8b09b0d219.exe
Resource
win10v2004-20220812-en
General
-
Target
d1e3cae787696a04c29d20bf77448ebd925f49f3d46c9148f293fa8b09b0d219
-
Size
491KB
-
MD5
67b57516e5d95e1c1ed2c0296e6265c0
-
SHA1
6cb8595af74036ec38af5034302cdce0e1e502e8
-
SHA256
d1e3cae787696a04c29d20bf77448ebd925f49f3d46c9148f293fa8b09b0d219
-
SHA512
0420231d3f2b0c2ce9f445488ff857ef95d4ef9ce51f38139f9564eb66199777fde2d2e25b38ea7df0eeb1623c55e3d00906c13c09a5d3ff95a3c15179965242
-
SSDEEP
12288:ChzADg0BZgGN+BSSGwEsCHN86WegNwX+d0ldGQQs3XJc:CAB/7hwEsc8veG3d0ldGZIXO
Malware Config
Signatures
Files
-
d1e3cae787696a04c29d20bf77448ebd925f49f3d46c9148f293fa8b09b0d219.exe windows x86
2834761666d5bfdcabdaaf95a4e34905
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSADuplicateSocketA
user32
GetMessagePos
GetMessageTime
FreeDDElParam
kernel32
GetNumaHighestNodeNumber
Sections
.text Size: 484KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 321B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE