Static task
static1
Behavioral task
behavioral1
Sample
d801e0163fae4825bd0d56cbc33f3e59c27654b4ae7d5be48a39e1055287812d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d801e0163fae4825bd0d56cbc33f3e59c27654b4ae7d5be48a39e1055287812d.exe
Resource
win10v2004-20220901-en
General
-
Target
d801e0163fae4825bd0d56cbc33f3e59c27654b4ae7d5be48a39e1055287812d
-
Size
142KB
-
MD5
a248f41b4951acf32c60c84e20ea9739
-
SHA1
7b51906fe04a4fe06e21f3b9a42ca4922b55c399
-
SHA256
d801e0163fae4825bd0d56cbc33f3e59c27654b4ae7d5be48a39e1055287812d
-
SHA512
dbc332872c6f0854de0ac59789e9bddae91fd8387bfed5f2ccb0cc5f0685ccfeb2e7b6e15db8b85f975296d0941659a2cc8c58cb844cc48f1b5b749aaac5537b
-
SSDEEP
1536:TMbNZuIVD43v8oiY3fJPOXirv+1PGSrKlkz020IjfWbo78kWFUi+OKOJ/T2:TMbNfk0ltXiLgPUlkfoo7uuAjJq
Malware Config
Signatures
Files
-
d801e0163fae4825bd0d56cbc33f3e59c27654b4ae7d5be48a39e1055287812d.exe windows x86
b7f15556c8c02d961cfdce0ce238d37d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDCEx
gdi32
SetROP2
kernel32
Sleep
VirtualProtect
GetSystemTimeAsFileTime
LoadLibraryExA
CreateProcessW
ReadFile
LoadLibraryExA
SleepEx
WriteProcessMemory
VirtualProtect
GetStartupInfoA
CreateFileA
WaitForSingleObjectEx
SleepEx
DeviceIoControl
DeviceIoControl
WaitForSingleObject
LoadLibraryExA
DeviceIoControl
GetSystemTime
WriteProcessMemory
CreateFileA
GetSystemTimeAsFileTime
Sleep
LoadLibraryExA
LoadLibraryExW
WaitForSingleObject
ReleaseMutex
VirtualProtectEx
ReadFile
VirtualProtectEx
GetProcAddress
GetCurrentDirectoryA
GetLastError
LoadLibraryA
GetCommandLineA
SetHandleInformation
GetCommandLineA
TlsGetValue
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentThread
GetCurrentThreadId
GetSystemTime
CreateProcessW
WriteProcessMemory
WriteProcessMemory
ReadFile
ReadProcessMemory
SleepEx
ReleaseMutex
LoadLibraryA
GetSystemTime
ReadProcessMemory
WaitForSingleObject
DeviceIoControl
CreateFileA
GetStartupInfoA
Sleep
SleepEx
CreateProcessA
ReleaseMutex
VirtualProtectEx
CreateProcessA
ReleaseMutex
CreateProcessA
GetSystemTimeAsFileTime
CreateProcessW
DeviceIoControl
CreateProcessA
WriteProcessMemory
DeviceIoControl
GetSystemTime
LoadLibraryA
VirtualProtectEx
CreateProcessW
LoadLibraryA
DeviceIoControl
GetSystemTime
GetStartupInfoA
VirtualProtectEx
ReleaseMutex
DeviceIoControl
ReleaseMutex
LoadLibraryExW
GetSystemTime
GetStartupInfoW
GetStartupInfoA
LoadLibraryExA
WaitForSingleObjectEx
ReleaseMutex
TerminateProcess
ReleaseMutex
GetSystemTimeAsFileTime
GetSystemTime
TerminateProcess
LoadLibraryExW
GetStartupInfoA
ReadProcessMemory
TerminateProcess
GetSystemTimeAsFileTime
LoadLibraryExA
Sleep
LoadLibraryExW
Sleep
GetSystemTimeAsFileTime
TerminateProcess
LoadLibraryExW
LoadLibraryExW
LoadLibraryExA
LoadLibraryA
WaitForSingleObjectEx
ReadProcessMemory
WaitForSingleObjectEx
CreateFileA
Sleep
LoadLibraryExA
ReadFile
ReadProcessMemory
VirtualProtect
SleepEx
LoadLibraryExA
DeviceIoControl
WriteProcessMemory
GetSystemTimeAsFileTime
ReleaseMutex
LoadLibraryExW
GetStartupInfoA
CreateProcessA
Sleep
CreateFileA
GetStartupInfoA
GetStartupInfoA
CreateFileA
ReadFile
DeviceIoControl
CreateFileA
WaitForSingleObjectEx
GetStartupInfoA
ReadFile
DeviceIoControl
CreateProcessA
CreateProcessA
CreateFileA
WriteProcessMemory
LoadLibraryExA
CreateProcessA
WaitForSingleObjectEx
ReadProcessMemory
Sleep
WaitForSingleObject
TerminateProcess
GetSystemTime
GetStartupInfoW
TerminateProcess
GetStartupInfoW
LoadLibraryExW
WaitForSingleObject
ReleaseMutex
CreateProcessA
SleepEx
LoadLibraryA
LoadLibraryExW
GetStartupInfoW
DeviceIoControl
WriteProcessMemory
WaitForSingleObjectEx
GetSystemTimeAsFileTime
VirtualProtect
GetSystemTime
ReadProcessMemory
Sleep
ReadFile
VirtualProtectEx
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 116KB - Virtual size: 120KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ