Static task
static1
Behavioral task
behavioral1
Sample
d5dc986b2cc44e994bc8c910d3b48344e4e61e4e3eb77af81f86cfc567dd8c88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5dc986b2cc44e994bc8c910d3b48344e4e61e4e3eb77af81f86cfc567dd8c88.exe
Resource
win10v2004-20220812-en
General
-
Target
d5dc986b2cc44e994bc8c910d3b48344e4e61e4e3eb77af81f86cfc567dd8c88
-
Size
631KB
-
MD5
a10cdfab7875d9f5255b4b4ae26d4b50
-
SHA1
ae7fd2c59de05cfe023e4a5a9c9d5bc535ca0891
-
SHA256
d5dc986b2cc44e994bc8c910d3b48344e4e61e4e3eb77af81f86cfc567dd8c88
-
SHA512
4cb775cf5bfd1b519a4c1a4b6a9d417d10972ec283a7b820da172f7a6d1b95169b9f87e9dcf7988d61f9a551c7175f740769dea04054745f9a527ffcad444a25
-
SSDEEP
12288:IzXXeX20IeBetm2lKzVvjGe4RC36bpp4hmtv+FEDwZrLmGhpDVFXyF9bJvQIt:uXuXZIAea74RwOn4hmIqsZr9LDmF9bBD
Malware Config
Signatures
Files
-
d5dc986b2cc44e994bc8c910d3b48344e4e61e4e3eb77af81f86cfc567dd8c88.exe windows x86
3f95f2238c254dedadb5c87b4c2a2754
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
_hwrite
GetCurrentThread
FindNextVolumeW
SearchPathA
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
secur32
LsaDeregisterLogonProcess
AcceptSecurityContext
InitSecurityInterfaceW
LsaGetLogonSessionData
DeleteSecurityContext
DecryptMessage
tapi32
lineMakeCallA
lineShutdown
lineGetDevCaps
lineOpen
MMCGetLineInfo
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 275KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 275KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ