Static task
static1
Behavioral task
behavioral1
Sample
d5652714fea2de49981ac94b4ca021dacb4e297bcabb74806429bd6154bbcf32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5652714fea2de49981ac94b4ca021dacb4e297bcabb74806429bd6154bbcf32.exe
Resource
win10v2004-20220812-en
General
-
Target
d5652714fea2de49981ac94b4ca021dacb4e297bcabb74806429bd6154bbcf32
-
Size
23KB
-
MD5
66b56bd28db7359155b4e78e2c939ea1
-
SHA1
bbda194d0da5908dc0edd6630f04c94692fbd054
-
SHA256
d5652714fea2de49981ac94b4ca021dacb4e297bcabb74806429bd6154bbcf32
-
SHA512
f317bbc143fdfb3dcf5f994a12ef8fe65e647b6ee452d4012f6df3dbf8ca12edf56e4713be0940a5660045a3b77ee2440d425a94790c4f59c7e6c7b9897bb9a1
-
SSDEEP
192:cQnYdxLTDO+Bj4h42p5GvZ3VsTbuKf/9DF4C38CfNqtlwPJfcf3VIQgggggggggg:cue1Ta+Bjq4m5GvZ0/9DFX38tl7fGJ6
Malware Config
Signatures
Files
-
d5652714fea2de49981ac94b4ca021dacb4e297bcabb74806429bd6154bbcf32.exe windows x86
604faaef48f9211ccb5038459ef46445
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
SendMessageW
PostQuitMessage
DefWindowProcW
CreateWindowExW
LoadCursorW
LoadIconW
RegisterClassExW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
kernel32
GetModuleHandleW
LoadLibraryA
ReadFile
CreateFileW
GetTickCount
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetCommandLineA
HeapAlloc
ExitProcess
gdi32
TextOutW
SetTextAlign
SetBkColor
DeleteObject
GetBkColor
GetStockObject
CreateSolidBrush
comctl32
ord17
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ