Static task
static1
Behavioral task
behavioral1
Sample
d81924e7a818e8d857a3af971f922f794467288002fe67d5776cf22256697a71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d81924e7a818e8d857a3af971f922f794467288002fe67d5776cf22256697a71.exe
Resource
win10v2004-20220812-en
General
-
Target
d81924e7a818e8d857a3af971f922f794467288002fe67d5776cf22256697a71
-
Size
800KB
-
MD5
65c0ae2c431aae05f2c6538201ac7170
-
SHA1
29d956f0d3d5c46a02a4bff1ef55d2f7544c8c24
-
SHA256
d81924e7a818e8d857a3af971f922f794467288002fe67d5776cf22256697a71
-
SHA512
3f3b57793844025c2b79634b2f2f48c4437df25dd2335a8b44f7ae90a6323f685e25459e1eaadf7cc9590134c11316e92eb5455ed015cec2c66af51ddc44be99
-
SSDEEP
24576:hztUUPne3kMVLTP4WZeAfvaBkG7nlwsfx:hztUUPMV4WZhGbWqx
Malware Config
Signatures
Files
-
d81924e7a818e8d857a3af971f922f794467288002fe67d5776cf22256697a71.exe windows x86
91897808c36845664e7fe19a4a6d4d68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
FindClose
GetExitCodeThread
IsBadWritePtr
CreateDirectoryA
HeapSize
FindResourceA
LocalLock
IsValidCodePage
GetCurrentProcess
GetFileAttributesA
GetStringTypeA
GetModuleHandleA
GetDriveTypeW
MapViewOfFile
GetLocaleInfoA
SetLastError
TlsGetValue
RemoveDirectoryA
VirtualProtect
GetTickCount
user32
GetWindowTextW
IsDialogMessageA
GetWindowLongW
GetCapture
PeekMessageW
SetFocus
PostMessageW
IsWindow
wsprintfW
DispatchMessageA
SetCursor
LoadImageW
LoadCursorA
msaatext
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE