Static task
static1
Behavioral task
behavioral1
Sample
d03b15fd357535d5b70d052952cc6c3d1e89226a2a8e405ccf74a2de12ca2b79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d03b15fd357535d5b70d052952cc6c3d1e89226a2a8e405ccf74a2de12ca2b79.exe
Resource
win10v2004-20220812-en
General
-
Target
d03b15fd357535d5b70d052952cc6c3d1e89226a2a8e405ccf74a2de12ca2b79
-
Size
215KB
-
MD5
3077a6b93494d2a7a3885f447af09a70
-
SHA1
6ff893bf5912d87b6c070b6d3e39188a3df17787
-
SHA256
d03b15fd357535d5b70d052952cc6c3d1e89226a2a8e405ccf74a2de12ca2b79
-
SHA512
82564caa405e15b41bacfa3904bda54eb8f9cf4832967c1c8fa79c700633cf4dd4b74709320ad42708c65a13a43d09643c7c19e1972a98172d44cd12b570ff45
-
SSDEEP
6144:S4aVYfFL3RCxU4ryiYBE+EJR5WkR1O58Xqoye2w:KVykxUoFAkXO5vu
Malware Config
Signatures
Files
-
d03b15fd357535d5b70d052952cc6c3d1e89226a2a8e405ccf74a2de12ca2b79.exe windows x86
10bdab2e7aa9257d86aea72509147bff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
scecli
SceCloseProfile
SceAnalyzeSystem
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceBrowseDatabaseTable
SceAddToObjectList
kernel32
lstrcmpA
LoadLibraryW
GetLocaleInfoA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetLocalTime
GetCurrentProcess
CloseHandle
SetLastError
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateFileA
SystemTimeToFileTime
GetOEMCP
FindResourceA
GetTickCount
HeapAlloc
HeapFree
QueryPerformanceCounter
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 8KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ