Static task
static1
Behavioral task
behavioral1
Sample
0d911e18c05b1843a4e3182f1d6cb393ab83a620c9b00776a1c08c1b2fe58bdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d911e18c05b1843a4e3182f1d6cb393ab83a620c9b00776a1c08c1b2fe58bdd.exe
Resource
win10v2004-20220901-en
General
-
Target
0d911e18c05b1843a4e3182f1d6cb393ab83a620c9b00776a1c08c1b2fe58bdd
-
Size
775KB
-
MD5
26a7c6fe1b56b041e436d7abdc826451
-
SHA1
aa2a23261f91073f02d45035aebcd4546b1635b7
-
SHA256
0d911e18c05b1843a4e3182f1d6cb393ab83a620c9b00776a1c08c1b2fe58bdd
-
SHA512
08380394ff57f5127f854529f7678622fb503ee5c9cb43e1a8ee7401409c7cdbb6c90298a1ef2b18d28d85e41422fe2ced59acb7809171bdc1c67f5894b23372
-
SSDEEP
24576:5gsBDKNbEMGBL7fbrs4W7zO+w2eTfK5XEle017PSxvcDCIY:tDUbNGBL7fMF7BcC5X6fN+
Malware Config
Signatures
Files
-
0d911e18c05b1843a4e3182f1d6cb393ab83a620c9b00776a1c08c1b2fe58bdd.exe windows x86
def01f3a037d9b4d7923e60b4c484fe6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyW
HeapCreate
lstrlenW
GetCurrentDirectoryA
GetModuleHandleA
GetLastError
SuspendThread
GetPriorityClass
CreatePipe
GetStartupInfoA
ClearCommBreak
WriteConsoleW
GetFileAttributesA
WriteConsoleW
CloseHandle
WriteConsoleW
CopyFileW
GetStdHandle
DisconnectNamedPipe
SetEvent
IsDebuggerPresent
msftedit
RichComboBoxWndProc
RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
shell32
ShellAboutA
DragAcceptFiles
ShellMessageBoxA
DragFinish
SHFree
SHGetSettings
DragQueryFileA
SHGetDiskFreeSpaceA
StrChrA
ExtractIconA
DuplicateIcon
SHGetMalloc
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE