Static task
static1
Behavioral task
behavioral1
Sample
d1d6bcb1e318abc7f8bb92d4eb3da9dd78843fa9bf456ceed0cf7bd666387104.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1d6bcb1e318abc7f8bb92d4eb3da9dd78843fa9bf456ceed0cf7bd666387104.exe
Resource
win10v2004-20220812-en
General
-
Target
d1d6bcb1e318abc7f8bb92d4eb3da9dd78843fa9bf456ceed0cf7bd666387104
-
Size
32KB
-
MD5
b2ea2f3764067ec3c02a4f2bd743e84c
-
SHA1
43d977a40d925de5c4f06f871321c8ab11587c29
-
SHA256
d1d6bcb1e318abc7f8bb92d4eb3da9dd78843fa9bf456ceed0cf7bd666387104
-
SHA512
6e9d21049c35e4f207dbda5c49d0209094bc4cf5963befcc5801f123f38fa67f782893205fc6b8f518e3c65096727581b00b6254e20106935d1c658287c07f01
-
SSDEEP
384:ccJzZ+EUGfJrh91wx1TznfypnkXlXaIaHtUPMgSru4lujG+47gx:cc5sWJz1wx1TDfy1K1sz7g
Malware Config
Signatures
Files
-
d1d6bcb1e318abc7f8bb92d4eb3da9dd78843fa9bf456ceed0cf7bd666387104.exe windows x86
f927c5d24fc18f8939923e69a866d4ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileW
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetComputerNameW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetModuleHandleA
GetModuleHandleW
GetStdHandle
GetSystemTimeAsFileTime
GetVersionExA
GetVolumeInformationW
GlobalMemoryStatus
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
QueryDosDeviceW
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenW
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetClientRect
GetMessageA
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxW
MoveWindow
PostQuitMessage
RegisterClassA
SendMessageA
SetFocus
TranslateMessage
wsprintfW
gdi32
CreateFontA
DeleteObject
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ