Static task
static1
Behavioral task
behavioral1
Sample
d6b2e6f309dd612ef278e28da8388ba2e8b0529c227f4c3db50b16dac7dfe5fc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d6b2e6f309dd612ef278e28da8388ba2e8b0529c227f4c3db50b16dac7dfe5fc.exe
Resource
win10v2004-20220812-en
General
-
Target
d6b2e6f309dd612ef278e28da8388ba2e8b0529c227f4c3db50b16dac7dfe5fc
-
Size
163KB
-
MD5
5ed481c428537c40f7929de02d52e834
-
SHA1
3ec082a56b5eeb6f0ae5349b1566467db740f330
-
SHA256
d6b2e6f309dd612ef278e28da8388ba2e8b0529c227f4c3db50b16dac7dfe5fc
-
SHA512
603130123bc88a2bc2e888e3b9f72a9b1816a545256fc2213e481cdfac49fb1694df469b616b13300d6f2f8ebddae717fe0c9f4aa9c88538c5b07bd85c99fd73
-
SSDEEP
3072:Za3O17/KTefrrHMqvw7kIKuj1hZWzRj1qKwx5+c2BHj9ivA:ZF17/AeJvw7XLjdWB19RxHM
Malware Config
Signatures
Files
-
d6b2e6f309dd612ef278e28da8388ba2e8b0529c227f4c3db50b16dac7dfe5fc.exe windows x86
d15140437421a6d4bee4a7607db81344
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
VirtualAlloc
TlsSetValue
GetAtomNameA
SetFilePointer
HeapReAlloc
GetConsoleOutputCP
GetCPInfo
GetLocaleInfoA
IsValidCodePage
WriteConsoleA
TlsAlloc
EnumResourceTypesA
GetOEMCP
HeapSize
MultiByteToWideChar
IsProcessorFeaturePresent
RtlUnwind
GetACP
TlsGetValue
GetDateFormatA
GetTimeFormatA
RaiseException
rpcrt4
RpcStringFreeA
shell32
SHDefExtractIconA
ShellExecuteExA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
DragAcceptFiles
Shell_NotifyIconA
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 486KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ