Static task
static1
Behavioral task
behavioral1
Sample
d232e5df715f124f2b42024885b71d35a194e3b176139b26f2bf03e91fc6a4c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d232e5df715f124f2b42024885b71d35a194e3b176139b26f2bf03e91fc6a4c1.exe
Resource
win10v2004-20220812-en
General
-
Target
d232e5df715f124f2b42024885b71d35a194e3b176139b26f2bf03e91fc6a4c1
-
Size
300KB
-
MD5
93157091fea4769e25728cffc4f29ff0
-
SHA1
02413fcb3a0811858d12aa74d44b3c887d747f3f
-
SHA256
d232e5df715f124f2b42024885b71d35a194e3b176139b26f2bf03e91fc6a4c1
-
SHA512
ac19153146ed57cd90fa43c509e274afbfe03d45c32a8299a53679e0bf974421804eeb1963fa27e3b8799841b4400f6ac7d2c5af0d4ba3bf34917a0069847a13
-
SSDEEP
6144:EGWnjF8zJX0Wk4Btj5yFyoBsYKj2iPKOFzNBNeh:YC1EWZAFyasvjdKOFzNBu
Malware Config
Signatures
Files
-
d232e5df715f124f2b42024885b71d35a194e3b176139b26f2bf03e91fc6a4c1.exe windows x86
c55fb1e61e578d2742ece4fdbb4b195a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
HeapSize
GetTickCount
IsBadWritePtr
RemoveDirectoryA
VirtualProtect
GetExitCodeThread
GetLocaleInfoA
TlsGetValue
GetFileAttributesA
FindResourceA
CreateDirectoryA
FindClose
IsValidCodePage
GetModuleHandleA
GetProcessHeap
GetFileAttributesA
MapViewOfFile
ResetEvent
GetStringTypeA
GetDriveTypeW
user32
GetCapture
SetCursor
GetWindowLongW
PeekMessageA
DispatchMessageA
GetWindowTextW
IsDialogMessageA
IsWindow
LoadImageW
SetFocus
LoadCursorA
wsprintfW
PostMessageW
msaatext
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE