Static task
static1
Behavioral task
behavioral1
Sample
d1c5c0c583fd97a99e9ece008b91a7f86a9a1071f9f7a0dca889bc116f51abd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1c5c0c583fd97a99e9ece008b91a7f86a9a1071f9f7a0dca889bc116f51abd8.exe
Resource
win10v2004-20220812-en
General
-
Target
d1c5c0c583fd97a99e9ece008b91a7f86a9a1071f9f7a0dca889bc116f51abd8
-
Size
388KB
-
MD5
6ab41885cde7af370fbc9bdfbcb46d57
-
SHA1
c9558725ee14fddbdefa3efec09933892d8a073a
-
SHA256
d1c5c0c583fd97a99e9ece008b91a7f86a9a1071f9f7a0dca889bc116f51abd8
-
SHA512
b5b09d5ea460a83d8b86f74932c9ed15943dbc836497a7a7304c6cea5ea3f09a0454f591e2d955f5ccf3e7f8d7fc2c5174775fc2b8bf9f43b6f0477397738e60
-
SSDEEP
12288:BWKzc1R2XKOJUus6meIemYmaLCD4pn36+iF:BWKzM0Xqus6vmYmQfV
Malware Config
Signatures
Files
-
d1c5c0c583fd97a99e9ece008b91a7f86a9a1071f9f7a0dca889bc116f51abd8.exe windows x86
a5d7773f9da02e25c63107b74d8894ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comsvcs
MiniDumpW
RecycleSurrogate
SafeRef
RecycleSurrogate
SafeRef
SafeRef
kernel32
HeapCreate
InterlockedIncrement
WriteFile
ExitThread
CreateFileW
GetSystemDirectoryA
GetACP
ReadFile
OpenProcess
DuplicateHandle
crypt32
CryptDecryptMessage
mapi32
MAPILogonEx
MAPIFreeBuffer
MAPIAllocateBuffer
MAPIAllocateMore
MAPIAdminProfiles
MAPIInitialize
OpenTnefStream
OpenStreamOnFile
RTFSync
Sections
.text Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 383KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE