Static task
static1
Behavioral task
behavioral1
Sample
d801b42d77a66f7e58d8c8fa69688bfded52c323ec02ef0b9a97b9ddb7df9ae1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d801b42d77a66f7e58d8c8fa69688bfded52c323ec02ef0b9a97b9ddb7df9ae1.exe
Resource
win10v2004-20220812-en
General
-
Target
d801b42d77a66f7e58d8c8fa69688bfded52c323ec02ef0b9a97b9ddb7df9ae1
-
Size
64KB
-
MD5
07870fd0c9ef09a561c2f956d7c11970
-
SHA1
0eb97c8472c78cb4fa8e673659b60a81573bb933
-
SHA256
d801b42d77a66f7e58d8c8fa69688bfded52c323ec02ef0b9a97b9ddb7df9ae1
-
SHA512
e7a20461f9135f195a1657f45827ffde657a3475f41c5af66b573649faff27f0e259dc674c8cbb66329e3bd94facd03d834517a9dcaf808348886a05d50cef8a
-
SSDEEP
1536:+STmeqmamccVj6tob+Kj0iNyPOPrc7CVNOlcSJ6uE:dnaXxtosYy2P3NfSJ+
Malware Config
Signatures
Files
-
d801b42d77a66f7e58d8c8fa69688bfded52c323ec02ef0b9a97b9ddb7df9ae1.exe windows x86
417641970dea98f003ecf2589e017bef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
SHDeleteKeyA
lz32
LZCopy
msvcrt
__set_app_type
user32
GetDC
gdi32
CreateSolidBrush
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoA
wininet
DeleteUrlCacheEntry
ole32
CoUninitialize
oleaut32
VariantInit
urlmon
URLDownloadToFileA
Sections
.text Size: 56KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE