Static task
static1
Behavioral task
behavioral1
Sample
d36cb60c28d4627e0dfdf09a5e9e0a21085a450cf4238135acce11968d4d2b15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d36cb60c28d4627e0dfdf09a5e9e0a21085a450cf4238135acce11968d4d2b15.exe
Resource
win10v2004-20220812-en
General
-
Target
d36cb60c28d4627e0dfdf09a5e9e0a21085a450cf4238135acce11968d4d2b15
-
Size
445KB
-
MD5
0d6819259f495bd7f3652cd130173f90
-
SHA1
8d0508da11d4857d6809da90a740befb9e1cedbf
-
SHA256
d36cb60c28d4627e0dfdf09a5e9e0a21085a450cf4238135acce11968d4d2b15
-
SHA512
680a381bddbfb4668c3f1ed3d512e7885d386fe578f9b055c26b867a84898421483f17fc8256aca30ef88d41c8b53e489a1b54fa64eb38dbdff84b6d6a2382f7
-
SSDEEP
12288:63VOBmTsLp+GC2C3Yd2qrjsugH0+B+i11QQuXpEEq:6UBNpDC2Qu9ivuu
Malware Config
Signatures
Files
-
d36cb60c28d4627e0dfdf09a5e9e0a21085a450cf4238135acce11968d4d2b15.exe windows x86
ad13a6316a4d4f339b1a281aea1b95aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCallbackReturn
advapi32
NotifyChangeEventLog
LsaOpenPolicy
kernel32
SetUserGeoID
user32
GetMenuCheckMarkDimensions
GetForegroundWindow
GetMessagePos
Sections
.text Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 203B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE