Static task
static1
Behavioral task
behavioral1
Sample
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe
Resource
win10v2004-20221111-en
General
-
Target
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c
-
Size
814KB
-
MD5
a6a2ebf504e3e931536553f47a0154f3
-
SHA1
627637b3e3bd986b585666a6640325f266803a96
-
SHA256
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c
-
SHA512
3628a6b55451e02f8f198908b01faa0bf35dd878e10ce09d6000a7cd24a9ceee7544114c1d085c1a309c83c88eaa2a1c5149e2f13aa85eebaf999c34a2c84b91
-
SSDEEP
24576:O6wt4n74Xwt8pUAbaugmSzWpg4yNODBG5ot:O6mnpPTFpg4yAo5o
Malware Config
Signatures
Files
-
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe windows x86
0d0c6233714ae09d32ff5571cd716ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetFileSize
GetCurrentDirectoryW
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
DeleteFileW
FindResourceW
OpenMutexA
GetVolumePathNameA
VirtualAlloc
GetVolumeInformationW
GetDriveTypeW
lstrlenA
GetDriveTypeW
GetDriveTypeW
msxml6
DllRegisterServer
DllSetProperty
DllCanUnloadNow
DllGetClassObject
Sections
.play Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ