Static task
static1
Behavioral task
behavioral1
Sample
de64791efca58c25f07c41712942eb0d7bb60b2e22698fb9837bd3a0fcdfab87.exe
Resource
win7-20220901-en
General
-
Target
de64791efca58c25f07c41712942eb0d7bb60b2e22698fb9837bd3a0fcdfab87
-
Size
215KB
-
MD5
829cad9af452ebd91091b029b2dbdedc
-
SHA1
acc19722d5becb2172eb773950fb12ce494f943f
-
SHA256
de64791efca58c25f07c41712942eb0d7bb60b2e22698fb9837bd3a0fcdfab87
-
SHA512
926af652485ab1859c30f108c7ce6f21a4560893df0bcde3a4f9485520a4f85217874b3ea0692709adf6f7b7ed840f6b4c9036381059a0c72bc8e2a44fcf04d5
-
SSDEEP
6144:avlOygbp7iwdX2W6txA/uA9cxdJUHY/EP:kS7rVBgA/uPxrUuS
Malware Config
Signatures
Files
-
de64791efca58c25f07c41712942eb0d7bb60b2e22698fb9837bd3a0fcdfab87.exe windows x86
15c6f6dbba436b91ff94b49576e0a884
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsA
GlobalAddAtomW
UnhandledExceptionFilter
EnumSystemLanguageGroupsA
GetLogicalDrives
GetVolumeNameForVolumeMountPointA
CreateMailslotW
LocalAlloc
GetDriveTypeW
GetDriveTypeA
IsValidLocale
IsValidCodePage
RequestDeviceWakeup
QueryPerformanceCounter
GetFileAttributesExA
GetLocalTime
GetPrivateProfileSectionA
GetProcessVersion
SetDefaultCommConfigW
lstrcmpW
DeleteVolumeMountPointW
GetCPInfo
ConnectNamedPipe
Beep
MapViewOfFile
LocalSize
WaitForMultipleObjects
FindVolumeClose
FreeEnvironmentStringsA
OpenEventW
VerifyVersionInfoA
_hwrite
GetLongPathNameW
user32
LoadMenuW
ModifyMenuA
GetGUIThreadInfo
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE