Static task
static1
Behavioral task
behavioral1
Sample
d7f85ba99348ec50e973a748cecc53afe396f909d822c0028ff980b423496a23.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7f85ba99348ec50e973a748cecc53afe396f909d822c0028ff980b423496a23.exe
Resource
win10v2004-20220901-en
General
-
Target
d7f85ba99348ec50e973a748cecc53afe396f909d822c0028ff980b423496a23
-
Size
109KB
-
MD5
0c947b31ce7c4b756366c7afe3190add
-
SHA1
ccb90982844a3db7f70345f0123c489425fccfc4
-
SHA256
d7f85ba99348ec50e973a748cecc53afe396f909d822c0028ff980b423496a23
-
SHA512
e5c08f2d976f50a675ae0dcdca4092235ee03636e1e8e4bd91382c201bb71729e1e8e393de2c8e826781a5d2bc5eca3353d105b362d5cbc2d86fc27b1574c358
-
SSDEEP
3072:h+65gokFyV+QrOFJ48U8645B23LAZcCeOmqgxK1X:h+ggNcYHFJz5Q7ASlOmtM
Malware Config
Signatures
Files
-
d7f85ba99348ec50e973a748cecc53afe396f909d822c0028ff980b423496a23.exe windows x86
036a3e17ce08002752ad4102b6bb9934
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetModuleHandleA
GetStartupInfoA
GetVolumePathNameA
TlsGetValue
GetEnvironmentVariableA
CancelIo
ResetEvent
Sleep
lstrlenA
GetCommandLineA
GetCommandLineA
CloseHandle
CreateEventA
VirtualQuery
FindResourceW
GetTimeFormatA
HeapDestroy
CloseHandle
HeapCreate
user32
DrawTextW
GetClassInfoA
GetSysColor
IsWindow
CreateIcon
IsZoomed
PeekMessageA
CallWindowProcA
DestroyMenu
DispatchMessageA
FindWindowA
GetWindowLongA
DispatchMessageA
psbase
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cmwuobm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE