Static task
static1
Behavioral task
behavioral1
Sample
d1dce78def99323ed801982b645e25cf2e382a91b47a6a9c47053ba509f2061d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1dce78def99323ed801982b645e25cf2e382a91b47a6a9c47053ba509f2061d.exe
Resource
win10v2004-20220812-en
General
-
Target
d1dce78def99323ed801982b645e25cf2e382a91b47a6a9c47053ba509f2061d
-
Size
746KB
-
MD5
6d026def61f4689b9bc2d4a0ff4b4540
-
SHA1
3911c012ed0453b7bb3b2f3f4a265bdcc71d1943
-
SHA256
d1dce78def99323ed801982b645e25cf2e382a91b47a6a9c47053ba509f2061d
-
SHA512
1e245cd74787a208e41c8646abae9662e002bde25004f9991b16cf128b17e6f480d36bfe638c17585e0048309ff9c2feeba2887a28579302a29819b607ea71d3
-
SSDEEP
12288:IgiMQ+fPK6pM7X4Fm2EuzawoJwj85pg+oLenhL15ey8dpOshwJD636VBlw:IgiMQ+H1pM7X4FmtIDoJwj8/6enhL15i
Malware Config
Signatures
Files
-
d1dce78def99323ed801982b645e25cf2e382a91b47a6a9c47053ba509f2061d.exe windows x86
4a07d5237684b162768cbee852589d3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsW
CreateWaitableTimerW
GetACP
GetTempFileNameW
InterlockedDecrement
_lclose
GetOverlappedResult
MoveFileW
GetFileAttributesExW
FindFirstVolumeMountPointW
GetThreadPriorityBoost
GetVersionExW
EnumResourceLanguagesW
GlobalDeleteAtom
SetCalendarInfoW
_lwrite
GetStartupInfoW
CommConfigDialogA
LocalShrink
GlobalFlags
FlushViewOfFile
MultiByteToWideChar
UnmapViewOfFile
BackupWrite
InterlockedExchangeAdd
CreateFileA
lstrcmpiA
GetCurrentProcess
GetCPInfo
RtlZeroMemory
MoveFileA
IsSystemResumeAutomatic
DebugBreak
GetFileTime
OpenEventW
_lcreat
Process32FirstW
MoveFileExA
GetProcessShutdownParameters
MapViewOfFile
CreateEventA
ExitProcess
WaitNamedPipeA
user32
LockWindowUpdate
LoadMenuA
DdeAddData
DeleteMenu
DdeConnectList
DlgDirListA
CreateIcon
GetSystemMetrics
SetSystemCursor
DestroyIcon
TrackPopupMenu
DdeFreeDataHandle
EnableMenuItem
FindWindowExW
GetKeyboardLayoutNameA
DrawIcon
GetWindowTextA
TrackMouseEvent
SetWindowRgn
EnumDesktopWindows
SetRect
SetCaretPos
LoadBitmapA
ToAscii
RemoveMenu
EqualRect
GetWindowPlacement
CreateIconFromResourceEx
RegisterClipboardFormatW
DdeDisconnectList
CreateIconFromResource
TranslateMDISysAccel
SetMessageExtraInfo
SetMenuContextHelpId
SendDlgItemMessageA
UnregisterDeviceNotification
GetClassInfoW
DragObject
SetRectEmpty
DdeQueryNextServer
CallMsgFilterW
DdeAbandonTransaction
IsWindowUnicode
SetMenuItemInfoA
CharNextA
GetNextDlgGroupItem
RealChildWindowFromPoint
GetThreadDesktop
DdeGetData
InsertMenuA
GetDialogBaseUnits
RegisterShellHookWindow
CharLowerBuffA
GetMonitorInfoA
DdeFreeStringHandle
GetGUIThreadInfo
OemToCharA
IsDialogMessageA
SendDlgItemMessageW
DestroyCaret
GetCapture
CheckMenuItem
SetForegroundWindow
GetUserObjectSecurity
RealGetWindowClassW
SetWindowsHookW
MenuItemFromPoint
CharPrevA
WaitMessage
CharUpperBuffW
shell32
SHGetIconOverlayIndexA
Shell_NotifyIconW
ShellExecuteExA
SHIsFileAvailableOffline
DragQueryFileAorW
RealShellExecuteExW
SHPathPrepareForWriteW
SHFormatDrive
FreeIconList
RegenerateUserEnvironment
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 791KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE