Static task
static1
Behavioral task
behavioral1
Sample
d33d8fca559964b7d0d1b79a9e3b33db7e7e65b94d1d0a9f9d8a4f61a061da30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d33d8fca559964b7d0d1b79a9e3b33db7e7e65b94d1d0a9f9d8a4f61a061da30.exe
Resource
win10v2004-20220812-en
General
-
Target
d33d8fca559964b7d0d1b79a9e3b33db7e7e65b94d1d0a9f9d8a4f61a061da30
-
Size
202KB
-
MD5
cbad7e4847bfb3787a5a66c976be04cf
-
SHA1
fbff83a2687e9c55eae571903e468bb5a030c5a1
-
SHA256
d33d8fca559964b7d0d1b79a9e3b33db7e7e65b94d1d0a9f9d8a4f61a061da30
-
SHA512
d3c1ff17901edfa07f11843d5628b3ccd8663df3207662c8d5a0cb508b9ecb8d3e45225ab16aa97e8ae72300bc0b0e0a0d1865f02bcac63e7a184d5c5e014998
-
SSDEEP
3072:ojB+aNhj+UJ5a/42/OUYSUef0LjP7RN3rPHIXLEHxoL2:MDN9iFfUv3rHIXLq
Malware Config
Signatures
Files
-
d33d8fca559964b7d0d1b79a9e3b33db7e7e65b94d1d0a9f9d8a4f61a061da30.exe windows x86
c639d6c752fdca34e9781cbfd4e5bb0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
GetDesktopWindow
GetDC
CharNextA
kernel32
GetCommandLineW
GetProcessHeap
GetModuleHandleW
lstrlenA
GetWindowsDirectoryA
QueryPerformanceCounter
DeleteFileW
MulDiv
GetLastError
GetTickCount
SetLastError
lstrlenW
GetStartupInfoA
RemoveDirectoryA
GetCurrentThreadId
GetCurrentProcess
GetThreadLocale
lstrcmpA
GetOEMCP
GetUserDefaultLangID
GetACP
GetConsoleOutputCP
CopyFileA
GetCommandLineA
GlobalFindAtomA
GetModuleHandleA
Sleep
GetCurrentThread
GetVersion
GetDriveTypeA
IsDebuggerPresent
GlobalFindAtomW
lstrcmpiA
LoadLibraryW
lstrcmpiW
DeleteFileA
SetCurrentDirectoryA
GetCurrentProcessId
VirtualAlloc
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ