Static task
static1
Behavioral task
behavioral1
Sample
d713f4bcbd972e816ccea6629cd4a341432b7170276391a1d4f292a1d142e115.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d713f4bcbd972e816ccea6629cd4a341432b7170276391a1d4f292a1d142e115.exe
Resource
win10v2004-20220812-en
General
-
Target
d713f4bcbd972e816ccea6629cd4a341432b7170276391a1d4f292a1d142e115
-
Size
410KB
-
MD5
67204618ae615f7c90759b7aa30a3ce3
-
SHA1
717ede736c0cf24635f0fff4cd3d0a46a4e593c0
-
SHA256
d713f4bcbd972e816ccea6629cd4a341432b7170276391a1d4f292a1d142e115
-
SHA512
ab96be89eef79b2cdf6ab5627c7b8e5ff5272b7e7abe35c47b17c02474927694f44efefdeec77c282e406a6bd00215a2faa2da9658d1a3d9357f70c9981954e1
-
SSDEEP
12288:wC9F+DdfUzQbnZEU0sByNPPI26vPJbv0:TUVbtBc1K9v
Malware Config
Signatures
Files
-
d713f4bcbd972e816ccea6629cd4a341432b7170276391a1d4f292a1d142e115.exe windows x86
59d1c2484f372e4fbbf85536851d180b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetSystemDefaultLangID
GetStdHandle
CloseHandle
SuspendThread
LocalSize
GetConsoleCP
HeapReAlloc
HeapCreate
WaitForMultipleObjects
GetModuleHandleA
GetTickCount
CompareFileTime
VirtualProtect
GetCommandLineA
GetVersion
lstrlenA
GlobalUnlock
WaitForSingleObject
GetAtomNameA
InterlockedExchange
gdi32
GetMetaFileA
GetStringBitmapA
GetTextColor
GetMetaRgn
FloodFill
EngLineTo
EndPath
CreateICA
DeleteObject
GdiFlush
Ellipse
CreateFontA
EqualRgn
CreatePalette
GetRgnBox
DeleteDC
BeginPath
GetFontData
AbortPath
Escape
winmm
OpenDriver
auxGetVolume
CloseDriver
auxSetVolume
PlaySoundA
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ