Static task
static1
Behavioral task
behavioral1
Sample
d9d8e32f1c9faef4b62b5a475c64063b6326e3a4dbcad34320b6550af4cdceda.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d9d8e32f1c9faef4b62b5a475c64063b6326e3a4dbcad34320b6550af4cdceda.exe
Resource
win10v2004-20220901-en
General
-
Target
d9d8e32f1c9faef4b62b5a475c64063b6326e3a4dbcad34320b6550af4cdceda
-
Size
216KB
-
MD5
0d8d2bfa581505bbfa144fc2ab8dd3a6
-
SHA1
cdd15bc43f23fe5ff93088693092027aea2210c3
-
SHA256
d9d8e32f1c9faef4b62b5a475c64063b6326e3a4dbcad34320b6550af4cdceda
-
SHA512
54c715f03febb221d86ec4052f594dada64659c8bd60851557f8c6ecc6b914e1c418ad7a7b87c4b90d73e7cdae70cacfd8c470849547c87ebc83c8518c31ee4b
-
SSDEEP
3072:1z30tjYJt1CoYrzczR1vZOr6iNp+6MpkzdFCK4LcLKTzQHyeZzr+hem:F0tjconUMr6O2gHIcLKT83N1m
Malware Config
Signatures
Files
-
d9d8e32f1c9faef4b62b5a475c64063b6326e3a4dbcad34320b6550af4cdceda.exe windows x86
d07d8b3a5ff25a0e2a524b183a506e43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetCurrentThread
ExitThread
CreateSemaphoreA
ExitProcess
CreateThread
CreateMutexA
VirtualProtect
ResetEvent
GetSystemDirectoryA
CreateEventA
GetVersionExA
GetFileSize
OutputDebugStringA
ReadFile
WriteFile
SetEvent
GetStdHandle
ResumeThread
Sleep
FatalExit
SuspendThread
GetModuleHandleA
GetCurrentThreadId
CloseHandle
GetTickCount
DeleteFileA
lstrlenA
advapi32
GetUserNameA
user32
MessageBoxA
GetWindow
PostMessageA
wsprintfA
GetClassInfoExA
GetForegroundWindow
RegisterClassA
GetActiveWindow
ole32
CoInitialize
shlwapi
SHGetValueA
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ