Static task
static1
Behavioral task
behavioral1
Sample
d716b64622f7c43224f5c07a20791681472188762423c05bb8765ffcbe1d32cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d716b64622f7c43224f5c07a20791681472188762423c05bb8765ffcbe1d32cf.exe
Resource
win10v2004-20221111-en
General
-
Target
d716b64622f7c43224f5c07a20791681472188762423c05bb8765ffcbe1d32cf
-
Size
810KB
-
MD5
44567477e7abc32a4918e41f2cd310f0
-
SHA1
d11b41328ebe7dca2c6f5b2c557505fc8329c2f5
-
SHA256
d716b64622f7c43224f5c07a20791681472188762423c05bb8765ffcbe1d32cf
-
SHA512
900a3a9264bd7d9d79ad8b4c87a330a9ae5068bc61383956b93aa75b364f99d36ce93e3ed6dad419598f16620bcb1873ed4b1b75e90e46cd7d13a0906fe64ab8
-
SSDEEP
24576:yYdQJ3kyNQrAKUQ7zkd9U02vfR1HoN2lRndmNt7:yaQRnQhzaUxfrIklDwt7
Malware Config
Signatures
Files
-
d716b64622f7c43224f5c07a20791681472188762423c05bb8765ffcbe1d32cf.exe windows x86
ec4fd72043be1e49017a76f5d3dea24a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
OpenMutexW
GetLogicalDriveStringsW
GetFileAttributesA
GetLogicalDrives
SetCurrentDirectoryW
lstrcpyW
GetStringTypeA
VirtualProtect
GetLogicalDrives
CreateEventA
GetLogicalDrives
GetModuleHandleW
GetStdHandle
GetTickCount
GetLogicalDrives
scecli
SceSetupGenerateTemplate
DeltaNotify
InitializeChangeNotify
SceOpenPolicy
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ydata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.kdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ