Static task
static1
Behavioral task
behavioral1
Sample
d531587d854126ee5b60a1dde50c9be746ac3c9175434772751f04a7f9a8c46b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d531587d854126ee5b60a1dde50c9be746ac3c9175434772751f04a7f9a8c46b.exe
Resource
win10v2004-20221111-en
General
-
Target
d531587d854126ee5b60a1dde50c9be746ac3c9175434772751f04a7f9a8c46b
-
Size
368KB
-
MD5
8540be4a897b3a2c0574ce7e26133797
-
SHA1
06d9a7e3ff73140bab023fa26da4154c74af3074
-
SHA256
d531587d854126ee5b60a1dde50c9be746ac3c9175434772751f04a7f9a8c46b
-
SHA512
cdf088058942204c7672b5c96f38262fde52e9507a318d4df79391c2806b115c20ff300905decd7cd21220e608acd293c2f9b7a81e48d89759af0b64fc2ec9a4
-
SSDEEP
6144:Ut4RMyhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:U6RMMrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
d531587d854126ee5b60a1dde50c9be746ac3c9175434772751f04a7f9a8c46b.exe windows x86
788abc9f6448e4bd7e791d49530a4e10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetPrivateProfileStringW
FindClose
CreateEventW
SetLastError
GetCurrentThreadId
EnumCalendarInfoW
FindAtomW
GetCurrentProcessId
GetConsoleAliasW
HeapCreate
GetModuleHandleA
TlsGetValue
GetDriveTypeW
EnterCriticalSection
LocalFree
ReadFile
ResumeThread
GetNumberFormatW
lstrlenW
user32
GetClientRect
IsWindow
GetCursorInfo
GetClassInfoA
DispatchMessageA
CallWindowProcW
GetMenuInfo
DispatchMessageA
GetSysColor
GetKeyState
GetKeyboardType
DrawTextA
SetFocus
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ