Static task
static1
Behavioral task
behavioral1
Sample
d31a559c95f9165030e2b4958c47307fe4ee891309c686a785b3ab525ca92b5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d31a559c95f9165030e2b4958c47307fe4ee891309c686a785b3ab525ca92b5e.exe
Resource
win10v2004-20220812-en
Errors
General
-
Target
d31a559c95f9165030e2b4958c47307fe4ee891309c686a785b3ab525ca92b5e
-
Size
243KB
-
MD5
743cd946234f823cee2b776c5e2ca589
-
SHA1
e0ac2ac1bbce200518a5061dfad48bc2b27cc136
-
SHA256
d31a559c95f9165030e2b4958c47307fe4ee891309c686a785b3ab525ca92b5e
-
SHA512
99566577789fe4a9b873c2487be4a90d6256d6d9e8589762dfdd4884e215bf0bba9db6a5397a3f69a7ccde9cce242513bcf34f5da3fa464e97a964dabbf93343
-
SSDEEP
6144:pxUIPOMvSJNkMi6k//pcnK8chT4AnEs8QUL5sZO:llMN3qyNchKs8nC
Malware Config
Signatures
Files
-
d31a559c95f9165030e2b4958c47307fe4ee891309c686a785b3ab525ca92b5e.exe windows x86
4c31ae37f5a6bb7bd203ad4db7fae04a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
strrchr
RtlAdjustPrivilege
ZwCreateFile
ZwDeviceIoControlFile
memcpy
RtlInitUnicodeString
memset
ZwClose
ZwReadFile
ZwWriteFile
ZwOpenFile
strchr
kernel32
lstrlenA
GetCurrentProcess
GetTickCount
VirtualFree
GetWindowsDirectoryA
WriteFile
OpenProcess
GetVolumeInformationA
CreateFileA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetVersion
GetCurrentProcessId
ExitProcess
Sleep
lstrcpyA
user32
wsprintfW
ExitWindowsEx
wsprintfA
advapi32
RegCloseKey
RegOpenKeyA
RegCreateKeyA
GetTokenInformation
OpenProcessToken
shell32
ShellExecuteExA
ShellExecuteA
ole32
CoInitializeEx
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 228KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ