Static task
static1
Behavioral task
behavioral1
Sample
d37a18f0d1e70da8afda1a9ce74cd1ca23ec8e56acb57a0405b674a394a609ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d37a18f0d1e70da8afda1a9ce74cd1ca23ec8e56acb57a0405b674a394a609ea.exe
Resource
win10v2004-20220812-en
General
-
Target
d37a18f0d1e70da8afda1a9ce74cd1ca23ec8e56acb57a0405b674a394a609ea
-
Size
775KB
-
MD5
0c9ed2264a9181912f7e3e7052785191
-
SHA1
191ed861dc8edf53df75b10052e076c14b0e8d8d
-
SHA256
d37a18f0d1e70da8afda1a9ce74cd1ca23ec8e56acb57a0405b674a394a609ea
-
SHA512
714bc583454e33fc795b2ff5e949bd4a9f6110dd2c335b260758079e7c4795ca61d611cdfdf8759e53cf7168a798a202d5e5f5bbae48b509606a050f2c72d6a1
-
SSDEEP
12288:DlXOieF5u+Lu1EVYNfDf3uSAgCzjAb+wJDVbKD1RHIzwcfvGsmNrhG97AM6:RXOh5ufEVKLB1eMbxbwRuf+smNr+7o
Malware Config
Signatures
Files
-
d37a18f0d1e70da8afda1a9ce74cd1ca23ec8e56acb57a0405b674a394a609ea.exe windows x86
31d77f3fa64c432f7a90f4a108a4de21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
IsDebuggerPresent
WriteConsoleW
CopyFileW
ClearCommBreak
CloseHandle
GetStdHandle
CreatePipe
HeapCreate
WriteConsoleW
GetFileAttributesA
GetCurrentDirectoryA
lstrlenW
lstrcpyW
GetModuleHandleA
GetPriorityClass
WriteConsoleW
GetLastError
DisconnectNamedPipe
ReleaseMutex
GetStartupInfoA
msftedit
RichListBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
shell32
DragAcceptFiles
SHGetDiskFreeSpaceA
SHGetSettings
DllUnregisterServer
ShellMessageBoxA
ExtractIconA
SHGetMalloc
SHFree
ShellAboutA
DragFinish
DragQueryFileA
DuplicateIcon
StrChrA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ