Static task
static1
Behavioral task
behavioral1
Sample
d7d7691cc6e724520f562a5d41f83b6a53bd00e0d60544b833af51c11f59e58b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7d7691cc6e724520f562a5d41f83b6a53bd00e0d60544b833af51c11f59e58b.exe
Resource
win10v2004-20220812-en
General
-
Target
d7d7691cc6e724520f562a5d41f83b6a53bd00e0d60544b833af51c11f59e58b
-
Size
797KB
-
MD5
7c5efa66acfb061097329d07b93d4cb0
-
SHA1
dfd128c0112b62ea7e2db782fbabbf9d2fb6bf1e
-
SHA256
d7d7691cc6e724520f562a5d41f83b6a53bd00e0d60544b833af51c11f59e58b
-
SHA512
e0d6e0d740112a23ba8dce18e617466da24ff9e772993b802966faad0f083404fa6e7e8dbe486b39a001ebfc71f6fef51c449a664850bf09e2117483b2b0849f
-
SSDEEP
24576:Ds6Squbie0GG9TK4xyQFOQCWFYnbwZFt:DPS4exayQFnVEWFt
Malware Config
Signatures
Files
-
d7d7691cc6e724520f562a5d41f83b6a53bd00e0d60544b833af51c11f59e58b.exe windows x86
8c6d0766711fa0705df26e6e8c062228
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
CreateEventA
FindClose
CreateDirectoryW
GetFileAttributesW
GetCurrentThread
RemoveDirectoryW
SetCommBreak
GetModuleHandleA
SetLastError
GetStringTypeA
HeapFree
CloseHandle
GetVersionExA
GetPrivateProfileIntA
DeviceIoControl
GetPrivateProfileSectionA
GetCurrentProcess
LocalFlags
GlobalLock
VirtualProtectEx
user32
GetWindowLongW
IsDialogMessageA
PostMessageW
GetWindowTextW
IsWindow
GrayStringW
IsZoomed
wsprintfW
DispatchMessageA
SetCursorPos
SetFocus
LoadCursorW
PeekMessageW
netshell
HrCreateDesktopIcon
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ