Static task
static1
Behavioral task
behavioral1
Sample
d62a713338fe20757773441e99950de730ceea7b32f2cc747240310948080564.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d62a713338fe20757773441e99950de730ceea7b32f2cc747240310948080564.exe
Resource
win10v2004-20220812-en
General
-
Target
d62a713338fe20757773441e99950de730ceea7b32f2cc747240310948080564
-
Size
135KB
-
MD5
91ccc1ebb48c0f26450a9e3aec9b83b2
-
SHA1
10832a2f478dbf7793612cf6409a3d0fef77d138
-
SHA256
d62a713338fe20757773441e99950de730ceea7b32f2cc747240310948080564
-
SHA512
0cdbf7ed261d5e3621f15a29d9ab52711aa1d41afac50b27027edec7af44046e7d419f6dbfc6ccb80556ee55b611e4626a7bf817f53056a15548660c5e6aa6c0
-
SSDEEP
3072:28WK9QzWmhNccbUcFDJ8YLNosF3qlbcoCRNd:R9gPccNksFzRN
Malware Config
Signatures
Files
-
d62a713338fe20757773441e99950de730ceea7b32f2cc747240310948080564.exe windows x86
f44cc44aa035f6dfd887fccb7126e857
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GlobalGetAtomNameA
LocalAlloc
AddAtomA
lstrcatA
lstrcmpA
lstrcmpiA
LoadLibraryA
WaitForSingleObject
GetProcAddress
user32
LoadCursorA
DefWindowProcA
CreateWindowExA
UnregisterClassA
MessageBeep
SetFocus
GetDlgItem
gdi32
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
GetObjectA
SelectObject
SetBkColor
StartPage
EndPage
CreateDCA
ExtTextOutA
ws2_32
ioctlsocket
recv
send
connect
select
WSAStartup
shutdown
closesocket
msvcrt
strcat
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ