Static task
static1
Behavioral task
behavioral1
Sample
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe
Resource
win10v2004-20220812-en
General
-
Target
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df
-
Size
812KB
-
MD5
91c51ccc13856811fbd1c1ba0207574f
-
SHA1
0542a6a20635cbdfb23159a35b57461fe34d411a
-
SHA256
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df
-
SHA512
b96a6c34d0e33660d8a295a065825e210b4ec48ab72a07ffbf99556a8a607229eff50fc52ff2ea7225a52e5b7f52c007237416d21d377e088f2502f67219ec4d
-
SSDEEP
24576:gKv7qrQUDPFGVZRSIk8bGrz64tdB48boHeo:l7XOPAVZRSaGrz64rU
Malware Config
Signatures
Files
-
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe windows x86
a9ec15042b715cb5e8bb0c8bb92a4e5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenMutexW
SetCurrentDirectoryW
SetEndOfFile
GetVersion
GetStringTypeW
lstrcpyW
GetFileAttributesA
SetEndOfFile
SetEndOfFile
SetEndOfFile
GetLogicalDriveStringsW
SetEndOfFile
CreateEventA
GetStdHandle
LoadLibraryA
VirtualProtectEx
wavemsp
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 802KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE