Static task
static1
Behavioral task
behavioral1
Sample
f51dc2c6e006e8026bb92f3fcb869c65fc7ceda48df11080de14ac742f542b46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f51dc2c6e006e8026bb92f3fcb869c65fc7ceda48df11080de14ac742f542b46.exe
Resource
win10v2004-20220901-en
General
-
Target
f51dc2c6e006e8026bb92f3fcb869c65fc7ceda48df11080de14ac742f542b46
-
Size
798KB
-
MD5
371a55268e472633d9441e72855b4b56
-
SHA1
2ecb93457e819f71e314b05e0ae8701248c74b97
-
SHA256
f51dc2c6e006e8026bb92f3fcb869c65fc7ceda48df11080de14ac742f542b46
-
SHA512
1916f2b445d8442160ab128ede629baa8b550aa38221b801e2acc7fc1691ba787abb07dff620b915e4913b6d00d80f973ccd7e0499b385518435aa80fef3bdd1
-
SSDEEP
12288:DVDyVcVpWN1rk5SnCKChAwMaubx3XGIak2Iwm/0p92yFxKZ9ZJPmoq:sV+WN1rkm0A7auF33lBwm/+IyFwX/P8
Malware Config
Signatures
Files
-
f51dc2c6e006e8026bb92f3fcb869c65fc7ceda48df11080de14ac742f542b46.exe windows x86
cb10d2500c86c604bb9f564dc4f9f798
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
LeaveCriticalSection
SuspendThread
GetFileAttributesW
SetFilePointer
InterlockedExchange
GetModuleHandleA
ResumeThread
CreateFileW
GetVersionExA
AddAtomA
PulseEvent
GetTickCount
IsValidLocale
GlobalFlags
CreateMutexA
lstrlenA
OpenEventW
HeapDestroy
GetCurrentThreadId
GetLocaleInfoA
CreateFileW
CreateDirectoryA
VirtualProtect
GetModuleFileNameA
user32
IsMenu
SetRect
wsprintfA
GetWindowLongA
MessageBoxA
DestroyIcon
PeekMessageA
DispatchMessageA
GetWindowTextA
LoadCursorA
DestroyMenu
GetWindowLongA
SetFocus
dplayx
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE