Static task
static1
Behavioral task
behavioral1
Sample
d003207be3b5817f65aada3986da4d891b77b922da648493d67b984e43a449ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d003207be3b5817f65aada3986da4d891b77b922da648493d67b984e43a449ea.exe
Resource
win10v2004-20220812-en
General
-
Target
d003207be3b5817f65aada3986da4d891b77b922da648493d67b984e43a449ea
-
Size
118KB
-
MD5
90c00cb32d2a2da6b5b784e51de7d660
-
SHA1
8a2f730c02f35fbb4ef0555ec84b30c79a390f34
-
SHA256
d003207be3b5817f65aada3986da4d891b77b922da648493d67b984e43a449ea
-
SHA512
eeb5f1b0c9d6e0855b6bbd8baca00cdd5671f7e785b39e7f60dbc1eef7b26946f424092f1f7508f0c2293fc0b4e410555233813bc83388ed9fa2ee79f77e615c
-
SSDEEP
3072:xsOR8PT5ScV82KDa9xWg2qe6qzERClQEB4:X8FSljuLWga6sERC
Malware Config
Signatures
Files
-
d003207be3b5817f65aada3986da4d891b77b922da648493d67b984e43a449ea.exe windows x86
0819006d65b0d18978ef388c1398e729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetShortPathNameW
GetConsoleTitleA
LoadLibraryA
WriteConsoleW
GetConsoleAliasW
GetStringTypeW
SetCurrentDirectoryA
DeleteFileA
Heap32Next
CreateFileMappingW
SetEnvironmentVariableA
GetACP
VirtualAlloc
SetEndOfFile
CreateMailslotW
GetProcessHeap
Heap32First
GetVersion
DeleteFileA
GetModuleHandleW
DeleteFileA
GetStringTypeW
msoeacct
GetDllMajorVersion
DllGetClassObject
ValidEmailAddress
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ