Static task
static1
Behavioral task
behavioral1
Sample
d2501f9f10dfb0405ef83d04f238635706f004495d58e5fc23356f8c2d3e49e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d2501f9f10dfb0405ef83d04f238635706f004495d58e5fc23356f8c2d3e49e2.exe
Resource
win10v2004-20220812-en
General
-
Target
d2501f9f10dfb0405ef83d04f238635706f004495d58e5fc23356f8c2d3e49e2
-
Size
304KB
-
MD5
c30ccdcf9d08cb32f21f30138aee4bf4
-
SHA1
16ccef637353eef88da6b476fd6edb8d7c08531c
-
SHA256
d2501f9f10dfb0405ef83d04f238635706f004495d58e5fc23356f8c2d3e49e2
-
SHA512
474a498027e3b7ec79d817020ea90662945cbb553913de3eec89226f51e324be682e6c0abfd14a9422cc9e8625d529b4025b183c7a17553617cf66bdc1fff18d
-
SSDEEP
6144:ihnqsd6VLR98xm7BtzilD3PZI7u+3tqd1w2dBMSXW:iRqdNx7KlEdgw9D
Malware Config
Signatures
Files
-
d2501f9f10dfb0405ef83d04f238635706f004495d58e5fc23356f8c2d3e49e2.exe windows x86
ecf3cd219eb8b7811e6a4a2530f100f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
CloseHandle
GetPrivateProfileIntW
GetFullPathNameA
CloseHandle
ReleaseSemaphore
CloseHandle
GetFileAttributesW
WaitForMultipleObjects
GetPrivateProfileIntW
lstrcmpiW
GetPrivateProfileSectionW
GetExitCodeThread
GetDiskFreeSpaceW
lstrcmpW
CreateEventW
GetModuleHandleA
OpenMutexA
HeapCreate
GetEnvironmentVariableA
GetVolumePathNameA
GetFullPathNameA
LoadLibraryA
certmgr
DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ