Static task
static1
Behavioral task
behavioral1
Sample
d4349f62e552763f97f4f592502bb4a8e49bea8483abe072f34f89e41fe421d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4349f62e552763f97f4f592502bb4a8e49bea8483abe072f34f89e41fe421d3.exe
Resource
win10v2004-20220901-en
General
-
Target
d4349f62e552763f97f4f592502bb4a8e49bea8483abe072f34f89e41fe421d3
-
Size
81KB
-
MD5
81d00e0a91166a5f7c4d30c359880860
-
SHA1
9cf5675444f869e1fb758a6c485dcbcda1aca08a
-
SHA256
d4349f62e552763f97f4f592502bb4a8e49bea8483abe072f34f89e41fe421d3
-
SHA512
90ce0a6f9f31a107ff060cbfb1964193fc545967b9cf436074591762b87fb2c6c3a46e1742cbd8a7bbcbc1a6940f14ba97d78841a02981aaf0e21d7a8ef802b5
-
SSDEEP
1536:pZLP7T0/E62+JB7Wg+D36ikPNwd167qZV/chPKh:pZLjk2+JZWg4d1NUh
Malware Config
Signatures
Files
-
d4349f62e552763f97f4f592502bb4a8e49bea8483abe072f34f89e41fe421d3.exe windows x86
23e9cbc15429d00abd935fa8139d332e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryA
IsBadWritePtr
HeapSize
GetTickCount
GetLocaleInfoA
ResetEvent
MapViewOfFile
IsValidCodePage
GetDriveTypeW
TlsGetValue
GetExitCodeThread
GetFileAttributesA
FindClose
VirtualProtect
SetLastError
GetStringTypeA
FindResourceA
GetModuleHandleA
GetFileAttributesA
GetProcessHeap
CreateDirectoryA
user32
GetCapture
wsprintfW
LoadImageW
GetWindowLongW
PostMessageW
SetCursor
LoadCursorA
SetFocus
PeekMessageA
GetWindowTextW
IsWindow
DispatchMessageA
IsDialogMessageA
msaatext
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE