Static task
static1
Behavioral task
behavioral1
Sample
d3131d71d8b8d62da1bcbf05268117af045607e943f0c35a17598b4b4b2cc455.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3131d71d8b8d62da1bcbf05268117af045607e943f0c35a17598b4b4b2cc455.exe
Resource
win10v2004-20220812-en
General
-
Target
d3131d71d8b8d62da1bcbf05268117af045607e943f0c35a17598b4b4b2cc455
-
Size
716KB
-
MD5
936f6a974c9735ca385841c381ad5110
-
SHA1
b10b3ad28b58cc9f9c06153d5b06af8ee5ebcb37
-
SHA256
d3131d71d8b8d62da1bcbf05268117af045607e943f0c35a17598b4b4b2cc455
-
SHA512
53a4b6f0680c00b327bea3b619293eabe19c3ecb7a2b812f585c54f963b9ff526825d1e5a675d20d70ba50d59f897726a748aa9bea190942699df51e60f54bcc
-
SSDEEP
12288:lG5gL3AMjCEyxd9cORKvyA5OI6mIBXIGxGKf/OyLE9ohlZWI+bqZHZq:l2dyvP/IBXIGpbLQoh6bWHZq
Malware Config
Signatures
Files
-
d3131d71d8b8d62da1bcbf05268117af045607e943f0c35a17598b4b4b2cc455.exe windows x86
14d220571078512de66d381fd72a3c37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetStartupInfoW
GetNumberFormatA
ExitProcess
GetStartupInfoA
GetOEMCP
GetCommandLineA
GetCommandLineW
IsProcessorFeaturePresent
shlwapi
ChrCmpIA
comctl32
InitCommonControlsEx
iphlpapi
InternalSetIfEntry
user32
TranslateAcceleratorW
GetSystemMetrics
LoadCursorW
ReleaseDC
InvertRect
ReleaseCapture
PtInRect
GetDC
CheckRadioButton
MoveWindow
BeginPaint
EndPaint
DispatchMessageW
LoadAcceleratorsW
LoadStringA
DrawMenuBar
CreateWindowExW
DrawTextW
wsprintfW
GetMessageW
UpdateWindow
EnableMenuItem
LoadIconW
SendMessageW
ShowWindow
DefWindowProcW
GetWindowRect
SetCapture
IsZoomed
IntersectRect
RegisterClassW
SetDlgItemTextW
GetForegroundWindow
UnionRect
GetMenu
LoadBitmapW
GetWindowPlacement
CheckDlgButton
OffsetRect
IsIconic
GetDlgItem
FrameRect
GetDlgItemTextW
PostMessageW
DdeAccessData
IsDlgButtonChecked
MessageBoxW
FillRect
PeekMessageW
GetSubMenu
SetRect
InvalidateRect
MessageBoxA
WinHelpW
GetClientRect
DialogBoxParamW
EndDialog
GetDesktopWindow
WaitMessage
DestroyWindow
Sections
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 609KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ