Static task
static1
Behavioral task
behavioral1
Sample
d232543ebffde6838bb3cc5b87b81cc8ad3a108286e59a009c168672f377b5b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d232543ebffde6838bb3cc5b87b81cc8ad3a108286e59a009c168672f377b5b7.exe
Resource
win10v2004-20220812-en
General
-
Target
d232543ebffde6838bb3cc5b87b81cc8ad3a108286e59a009c168672f377b5b7
-
Size
62KB
-
MD5
a25c900ad860a76be8bc973dc1dc7950
-
SHA1
f0630535752e5d83eeb01a83148f6938d0a98ab5
-
SHA256
d232543ebffde6838bb3cc5b87b81cc8ad3a108286e59a009c168672f377b5b7
-
SHA512
af63a058a7c36f19509f97cb46b4008de304b300a26d73f085cb32a18dfa76d203dd820b6e956a0f1704bdc8880d2e7ff73ed93637a230b83a6972f6527410bd
-
SSDEEP
1536:J/poeaM8/rZ/kNBS+yPVeZb+5duIWj/dJE14:JRoePB17ZXIsFJ24
Malware Config
Signatures
Files
-
d232543ebffde6838bb3cc5b87b81cc8ad3a108286e59a009c168672f377b5b7.exe windows x86
1f216f0014b213cdb8c46dd1f5059b65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
SetThreadLocale
CommConfigDialogW
GetProcAddress
GetUserGeoID
SetEvent
GetCurrencyFormatW
PrepareTape
GetLastError
SetFirmwareEnvironmentVariableA
CreateThread
FindResourceW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE