Static task
static1
Behavioral task
behavioral1
Sample
d895960d6af978e9d9755508ebbb6f7b0129755ad06d00796e462b4acbb5046d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d895960d6af978e9d9755508ebbb6f7b0129755ad06d00796e462b4acbb5046d.exe
Resource
win10v2004-20220812-en
General
-
Target
d895960d6af978e9d9755508ebbb6f7b0129755ad06d00796e462b4acbb5046d
-
Size
311KB
-
MD5
81944e46a0078e1e49be344f5f54a4d0
-
SHA1
6b8f1b5dcd5c36a18a5f3946c4b7a777af26249f
-
SHA256
d895960d6af978e9d9755508ebbb6f7b0129755ad06d00796e462b4acbb5046d
-
SHA512
78517aa7c65cd20727aead16bae5c416c1cb27e673ba814dea959da4d2761d9cc08109faf370c3119742b024989c2db150e011177ab50e39dce3c1753844a421
-
SSDEEP
6144:4NDt+7LJHJmgzp/+2FH4qq8N8IAQf/v0sfk/+gH0e+NS7DkZul8q:qDI7LJHJ5d/+2FYqq8+IAQfbbgHv+8DN
Malware Config
Signatures
Files
-
d895960d6af978e9d9755508ebbb6f7b0129755ad06d00796e462b4acbb5046d.exe windows x86
4bd0121bd59ac32d6c0fffe0b878fb85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetStringTypeA
GetPrivateProfileSectionA
GetCurrentProcess
CloseHandle
GetVersionExA
GetStdHandle
GetCurrentThread
CreateEventA
GlobalLock
CreateDirectoryW
FindVolumeClose
DeviceIoControl
RemoveDirectoryA
GetFileAttributesW
GetPrivateProfileIntA
GetDriveTypeA
HeapFree
VirtualProtectEx
GetFileAttributesW
GlobalFlags
shell32
ShellAboutA
ExtractIconA
ShellMessageBoxA
StrChrA
DragFinish
SHFree
DllUnregisterServer
DuplicateIcon
SHGetMalloc
DragQueryFileA
SHGetSettings
DllUnregisterServer
DragAcceptFiles
ntmarta
AccConvertSDToAccess
AccConvertAclToAccess
AccGetExplicitEntries
AccFreeIndexArray
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ