Static task
static1
Behavioral task
behavioral1
Sample
d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097.exe
Resource
win10v2004-20221111-en
General
-
Target
d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097
-
Size
326KB
-
MD5
74779653709c86041df8dc5949aa5e16
-
SHA1
a3583f462b089dae65b480072ac7863dc2ad4b1a
-
SHA256
d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097
-
SHA512
7f0814cd448b2d31818afdb75127916a2299a3413e40418d5ac680ec77dbdcb0b752cdc30098a91a3eaf05f650ac7ac1dc57db3e3348bed278cea3a05cb4368c
-
SSDEEP
6144:YqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:SO1xm+QoK0t4K3gCTDYWGrYzt+NST
Malware Config
Signatures
Files
-
d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097.exe windows x86
8743076dd08ef1894e53c7d247d4ea13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetModuleHandleA
GetTickCount
CloseHandle
Sleep
LoadLibraryW
GetCommandLineW
GetComputerNameA
FindVolumeClose
lstrlenA
HeapCreate
GetDiskFreeSpaceA
LocalUnlock
LocalFree
ResetEvent
CreateFileA
GetDateFormatA
UnmapViewOfFile
SetLastError
GetSystemTime
user32
CheckRadioButton
IsWindow
GetDC
CallWindowProcA
GetDlgItem
CreateWindowExA
DispatchMessageA
DrawStateA
DrawMenuBar
GetComboBoxInfo
SetFocus
FillRect
DrawEdge
advapi32
IsTokenUntrusted
FreeSid
RegCloseKey
RegDeleteKeyA
RegEnumValueA
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ