Static task
static1
Behavioral task
behavioral1
Sample
d3d19ae5c781d5b22ba79b4d34b1f02650f99d7911da6b48c7379428528b591d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d3d19ae5c781d5b22ba79b4d34b1f02650f99d7911da6b48c7379428528b591d.exe
Resource
win10v2004-20220812-en
General
-
Target
d3d19ae5c781d5b22ba79b4d34b1f02650f99d7911da6b48c7379428528b591d
-
Size
48KB
-
MD5
8193ee9a604beba74849d502fadfb9fe
-
SHA1
cc02eb2d566245972220a73d88259124c6ac9b32
-
SHA256
d3d19ae5c781d5b22ba79b4d34b1f02650f99d7911da6b48c7379428528b591d
-
SHA512
4a784557ddc68e5a7e1fb08997d75e3dd0eb919af88f2240b7ae914ac7ea5f29a36bb792e0857cc2c3b0711e9c04f512bd00d721fb6647484cbc0c56cbb8d8b8
-
SSDEEP
768:6PotfcbVGEnBy5N5UG+621xflE7hNAf4i5qZTsKQu+ER3fS:6PbhGHPUG+621xfit2dWgKQe
Malware Config
Signatures
Files
-
d3d19ae5c781d5b22ba79b4d34b1f02650f99d7911da6b48c7379428528b591d.exe windows x86
0d5442f606cebd1d58614352c0a593c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStringsA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReadConsoleInputA
ReadFile
ResumeThread
SetConsoleCtrlHandler
SetConsoleMode
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteFile
Sections
AUTO Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ