Static task
static1
Behavioral task
behavioral1
Sample
0d1f1b2bd6b77709aca92040312f076cabfa9c3922a61f5e72944a1d2e738937.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0d1f1b2bd6b77709aca92040312f076cabfa9c3922a61f5e72944a1d2e738937.exe
Resource
win10v2004-20220812-en
General
-
Target
0d1f1b2bd6b77709aca92040312f076cabfa9c3922a61f5e72944a1d2e738937
-
Size
462KB
-
MD5
44bfc01cdf2ec147faa2ebd2269ec845
-
SHA1
f942e89835d39b4e4a96c5bd91f63bc4c4811d21
-
SHA256
0d1f1b2bd6b77709aca92040312f076cabfa9c3922a61f5e72944a1d2e738937
-
SHA512
e8d54c5df8354553a3bf054e7be87df1a559f86ef12fda17d7c2bdba0b9a602ae5233af2c7625a0888c820edde05912e8460f0cd7322d8b44a6558eeb5d7464c
-
SSDEEP
12288:KGYzZcQ/AqFD4B0mWAImbHdZzpa9iXzPiPPiCm23LW:KGYz6Q4qFDizjImb9ZGqzeiT4
Malware Config
Signatures
Files
-
0d1f1b2bd6b77709aca92040312f076cabfa9c3922a61f5e72944a1d2e738937.exe windows x86
ceb42364ca911b42dff476f97ab12516
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LCMapStringW
QueryPerformanceCounter
GlobalMemoryStatus
GetDiskFreeSpaceExW
GetLongPathNameA
Process32First
Process32Next
OpenProcess
OpenThread
SuspendThread
ResumeThread
lstrcpyA
CreateToolhelp32Snapshot
GetModuleFileNameW
CreateDirectoryW
SetFileAttributesW
msimg32
TransparentBlt
shell32
SHCoCreateInstance
user32
DestroyWindow
FindWindowW
SendMessageA
PostMessageA
EnableWindow
PeekMessageA
gdi32
CreateBitmap
CreateSolidBrush
GetFontData
SetBrushOrgEx
GetObjectW
Sections
.text Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ