Static task
static1
Behavioral task
behavioral1
Sample
d7f410afee289bf04d88f9491d75dd204ee163493c37a694560dbb852a0cc444.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7f410afee289bf04d88f9491d75dd204ee163493c37a694560dbb852a0cc444.exe
Resource
win10v2004-20220812-en
General
-
Target
d7f410afee289bf04d88f9491d75dd204ee163493c37a694560dbb852a0cc444
-
Size
153KB
-
MD5
0eb167eba51b709b6dea18b5f7ae6a3c
-
SHA1
5da1807a381b1ff1be9359b53353ba1d661b2900
-
SHA256
d7f410afee289bf04d88f9491d75dd204ee163493c37a694560dbb852a0cc444
-
SHA512
c24a7530089e50426728ec39b2d13eb82116f2a3b299e3e3101bc117acc0a5147624b819f9efd0d02f4f4772b0593ca2221e41637ad1811629747cdd13005cf9
-
SSDEEP
3072:7GlnrIMwWSlOMxja+VTMczKYV4AxwYmsiv4L56UT:q5pgxjPV4ceYi2Nm3v4HT
Malware Config
Signatures
Files
-
d7f410afee289bf04d88f9491d75dd204ee163493c37a694560dbb852a0cc444.exe windows x86
a236357c60806efdde76c07aef7ea9ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
LocalFree
CreateFileA
ReadFile
ResumeThread
ExitProcess
SetEvent
CreateMutexA
VirtualAlloc
GetProcAddress
VirtualFree
LoadLibraryA
WriteFile
GetCurrentThreadId
CreateEventA
VirtualProtect
LockResource
LoadResource
FindResourceA
GetCurrentProcessId
GetCurrentDirectoryA
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
CreateThread
GetStdHandle
ExitThread
GetModuleHandleA
Sleep
GetLastError
ConnectNamedPipe
GetCurrentProcess
CreateNamedPipeA
CloseHandle
GetComputerNameA
GetVersionExA
user32
SendMessageA
FindWindowA
CreateDialogParamA
GetWindow
GetActiveWindow
GetForegroundWindow
ShowWindow
ntdll
LdrGetDllHandleEx
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ