Static task
static1
Behavioral task
behavioral1
Sample
d69a1a3d666f02a1eac658c6dffd8b24b50a627d713260a7133ffe3155053c55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d69a1a3d666f02a1eac658c6dffd8b24b50a627d713260a7133ffe3155053c55.exe
Resource
win10v2004-20220901-en
General
-
Target
d69a1a3d666f02a1eac658c6dffd8b24b50a627d713260a7133ffe3155053c55
-
Size
521KB
-
MD5
42b4766177790bbd2768aa8bc538ddd5
-
SHA1
c2270e13b41620dcf499b709e07208a174756fbd
-
SHA256
d69a1a3d666f02a1eac658c6dffd8b24b50a627d713260a7133ffe3155053c55
-
SHA512
d83dce170b09fd2dcb1e9300a7d6f33454e956add72b3e1f5ee7ab3d67e56ec6d5c587ca6cf2790dcab47faa29849c05fcce3976c70a51b7d05110c4e659eab9
-
SSDEEP
12288:UiVb8L4MtfjkopdqK/QRnp1w9cZJBYP543g4qXf3k:UiVb0BfpdqKoR3wiZJBYG3gbvk
Malware Config
Signatures
Files
-
d69a1a3d666f02a1eac658c6dffd8b24b50a627d713260a7133ffe3155053c55.exe windows x86
c38eb42cbdc5c0f34fb08c003f413847
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
FindNextFileW
WaitForSingleObject
GetLocaleInfoA
LeaveCriticalSection
EnumResourceNamesA
GetTickCount
EnumCalendarInfoA
SetEvent
MoveFileExA
GetModuleHandleA
CompareStringA
GetConsoleTitleA
HeapCreate
CreateSemaphoreW
GetCurrentThread
GetDiskFreeSpaceA
drmv2clt
CreateDRMRightsManager
DllUnregisterServer
LaunchURL
MakeEscapedURL
Sections
.text1 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.edata Size: 504KB - Virtual size: 771KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ