Static task
static1
Behavioral task
behavioral1
Sample
de88d321216a56666fbca352b8a7571451717586676078970ee1d1c67db75281.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de88d321216a56666fbca352b8a7571451717586676078970ee1d1c67db75281.exe
Resource
win10v2004-20220812-en
General
-
Target
de88d321216a56666fbca352b8a7571451717586676078970ee1d1c67db75281
-
Size
41KB
-
MD5
80ab0e68804d999bb9100b95b256a460
-
SHA1
819572e6863672f4279f1d440091039ada64c289
-
SHA256
de88d321216a56666fbca352b8a7571451717586676078970ee1d1c67db75281
-
SHA512
1c53ffbd8f534432fa299fc97575fb4345cd03fd525aa12362028955e8a62add18c747955e1a9544f8fd2a74c42db9e143d080e32f3cef4661f452160b192030
-
SSDEEP
768:5hmf0vB9BB0ySq4HHsPl3fzdRc+lLSzHmvmg:5hmfaVPl3LD7lXd
Malware Config
Signatures
Files
-
de88d321216a56666fbca352b8a7571451717586676078970ee1d1c67db75281.exe windows x86
8b52fd1ccef5bb5b41ddfce1fe327186
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetVersionExA
InitializeCriticalSection
GetProcAddress
user32
EndDialog
DialogBoxParamA
SendMessageA
resutils
ResUtilGetEnvironmentWithNetName
ResUtilGetMultiSzProperty
ResUtilGetProperties
ResUtilGetPropertySize
ResUtilGetBinaryValue
ResUtilGetResourceDependency
ResUtilSetMultiSzValue
ResUtilSetPropertyTableEx
ResUtilVerifyPropertyTable
ResUtilGetResourceDependentIPAddressProps
ResUtilIsResourceClassEqual
ResUtilFindMultiSzProperty
ResUtilPropertyListFromParameterBlock
ResUtilAddUnknownProperties
ResUtilStopService
ResUtilDupParameterBlock
ResUtilDupString
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 959B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ