Static task
static1
Behavioral task
behavioral1
Sample
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe
Resource
win10v2004-20220812-en
General
-
Target
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d
-
Size
762KB
-
MD5
3697ec9b9e73cd9c420385b660367473
-
SHA1
566e6e8bb7fcda1aaf8d6eceab95aeff4490d465
-
SHA256
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d
-
SHA512
ceea6e16eda147fc03e3e7a5c21a3be5b34fbd241cc22c87a2efd97c21cbd18c772a8101383e1ab0af931144ffb1eb715fb066d0d6bca456645af4d17690cfc4
-
SSDEEP
12288:UIymmaXrn/NKSpDmKRiNv+v4XwQTRMS9LnHwfTAOzHpphEeTK3ajIK/1h:UXI/NKS51TvUNTuSRn5a/hJ2qII
Malware Config
Signatures
Files
-
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe windows x86
a3c7c597c82238b50d138abadb961eb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
GetVolumeInformationA
GetDriveTypeW
GetDriveTypeW
FindResourceA
DeleteFileW
GetCurrentDirectoryW
GetFileSize
lstrlenA
GetModuleFileNameW
GetDriveTypeW
VirtualAlloc
IsBadStringPtrW
GetDriveTypeW
GetModuleHandleA
GetDriveTypeW
GetDriveTypeW
msxml3
DllRegisterServer
DllGetClassObject
DllMain
DllCanUnloadNow
Sections
.play Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.gdata Size: 741KB - Virtual size: 747KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ