Static task
static1
Behavioral task
behavioral1
Sample
d84c8f2cced11929184f61df8d21cc756d41447d51781f91338e74f51f8b1221.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d84c8f2cced11929184f61df8d21cc756d41447d51781f91338e74f51f8b1221.exe
Resource
win10v2004-20220812-en
General
-
Target
d84c8f2cced11929184f61df8d21cc756d41447d51781f91338e74f51f8b1221
-
Size
115KB
-
MD5
022025e0f4ef64841b1b708ccb017940
-
SHA1
3e0dd5a87381cb916d9aef1478d9c7a118f2be31
-
SHA256
d84c8f2cced11929184f61df8d21cc756d41447d51781f91338e74f51f8b1221
-
SHA512
c87bb18ed3f799ff138f6d7d6815e4d356d84e197c1c050d56e77ce1ca46794a39e9175a97fd85b252344971e2dc68ae8913ae1106f1ebbe5ed3728e1f6ef4cd
-
SSDEEP
1536:c6GdZb1WEk1Nbt3FabCU21BsiLayLhM60KcXqIyA3JCEu7i3mhb8DbBG1aWg:KN1Wt3lUbCU2DVO6Z3I53JriQmhopWg
Malware Config
Signatures
Files
-
d84c8f2cced11929184f61df8d21cc756d41447d51781f91338e74f51f8b1221.exe windows x86
eaae7781d417191f069bbbecef644d34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
CloseHandle
GetModuleHandleA
SetEvent
IsBadStringPtrA
WriteConsoleW
CopyFileW
DisconnectNamedPipe
CreatePipe
lstrlenW
GetPriorityClass
IsValidLocale
ReleaseMutex
GetLastError
GetStartupInfoA
lstrcpyW
GetFileAttributesA
WriteConsoleW
IsBadCodePtr
GetCurrentDirectoryA
WriteConsoleW
msftedit
RichEditWndProc
RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
shell32
SHGetDiskFreeSpaceA
ShellMessageBoxA
StrChrA
SHGetMalloc
ExtractIconA
SHGetDiskFreeSpaceA
SHGetSettings
ShellAboutA
DragAcceptFiles
DuplicateIcon
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ