Static task
static1
Behavioral task
behavioral1
Sample
d47624c5cc9b52b7f23a0bebbab1131f1cf10d38d48658f4da485651245244f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d47624c5cc9b52b7f23a0bebbab1131f1cf10d38d48658f4da485651245244f2.exe
Resource
win10v2004-20220812-en
General
-
Target
d47624c5cc9b52b7f23a0bebbab1131f1cf10d38d48658f4da485651245244f2
-
Size
488KB
-
MD5
4f89ebd68f2135affa8833b54c9c29e0
-
SHA1
031243ea446c6d731502cdc6703cd12dc65e5e2b
-
SHA256
d47624c5cc9b52b7f23a0bebbab1131f1cf10d38d48658f4da485651245244f2
-
SHA512
81e54d0ee7fbc6cce068aa86dc3f046f46f9e3b57ca6daafede1208d154ea599c1520aa01ca45cb2e10113b2a35f91fa4a71212042db9bcea642765b025600e4
-
SSDEEP
6144:T0SW9wZciFYN8eAtrxagRpc7lWNDbTEmsvvuJ:T3Zcie8e2rMgRpK2bmuJ
Malware Config
Signatures
Files
-
d47624c5cc9b52b7f23a0bebbab1131f1cf10d38d48658f4da485651245244f2.exe windows x86
7891ff91e0729eca74f4efda2eed7663
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathW
GetLastError
LocalFree
GetFileSize
SetEndOfFile
FreeLibrary
HeapAlloc
SystemTimeToFileTime
GetCurrentProcess
WaitForSingleObject
GetModuleHandleW
SetFileTime
WriteFile
ReadFile
GetShortPathNameA
SetLastError
GetFileAttributesW
GetLongPathNameA
FindClose
RemoveDirectoryW
CloseHandle
GetWindowsDirectoryW
GetSystemTime
TerminateProcess
RaiseException
RtlUnwind
WideCharToMultiByte
GetProcessHeap
CreateDirectoryW
HeapFree
GetCommandLineW
GetProcAddress
LoadLibraryA
DeleteCriticalSection
VirtualProtect
ExitProcess
GetStdHandle
GetTickCount
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleA
WriteConsoleA
GetSystemTimeAsFileTime
HeapReAlloc
Sleep
GetCommandLineA
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
user32
GetParent
GetDesktopWindow
GetWindowThreadProcessId
MessageBoxA
MessageBoxW
EnumWindows
PostMessageW
advapi32
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
shell32
CommandLineToArgvW
ole32
CoTaskMemFree
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 289KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ