Static task
static1
Behavioral task
behavioral1
Sample
d616feeb1c8b5387ad49eae70285cfc7a252607ad2efb2019dc804df3fca9bfe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d616feeb1c8b5387ad49eae70285cfc7a252607ad2efb2019dc804df3fca9bfe.exe
Resource
win10v2004-20220812-en
General
-
Target
d616feeb1c8b5387ad49eae70285cfc7a252607ad2efb2019dc804df3fca9bfe
-
Size
28KB
-
MD5
ac5b960528ef687e6bf07ab486b2ff79
-
SHA1
ec31f24c21d4f6ea968788ebf0c63d0c17379c12
-
SHA256
d616feeb1c8b5387ad49eae70285cfc7a252607ad2efb2019dc804df3fca9bfe
-
SHA512
42c6d91a29de87f1ef788a236af6952654926cfdfdb408dfcc9c780704682b0ac387740195a48b3e42cbc8622fd61026aeeccc93b446410aa195029343c67c9a
-
SSDEEP
384:ueqtEesJaxsvQd035njBNw3Ml/oIXqgbilXLQ8AJMJfd7abZofCG/rEHzSHoj:grW35jBNw3MlTXpilXLQhJMXaduUzJ
Malware Config
Signatures
Files
-
d616feeb1c8b5387ad49eae70285cfc7a252607ad2efb2019dc804df3fca9bfe.exe windows x86
837b8dbe903d70a0dfd0bb31547a6077
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmSetHotKey
ImmGetConversionListA
dbghelp
MiniDumpReadDumpStream
MiniDumpWriteDump
SymGetModuleInfo
SymRegisterFunctionEntryCallback64
dbghelp
SymMatchString
EnumerateLoadedModules
oleaut32
SysFreeString
VariantInit
VariantClear
LoadRegTypeLi
SysAllocString
SysAllocStringLen
SysStringByteLen
SysStringLen
VariantChangeType
shlwapi
HashData
PathAppendW
PathFindFileNameW
PathQuoteSpacesW
PathRemoveFileSpecW
SHIsLowMemoryMachine
StrCmpW
StrToIntW
gdi32
DeleteObject
GetObjectW
SetBkMode
PolyPolyline
CreatePen
shell32
SHAddToRecentDocs
CommandLineToArgvW
kernel32
SetEvent
LoadLibraryW
LoadLibraryExA
SetLastError
InitializeCriticalSection
GlobalFree
GetWindowsDirectoryW
GetTickCount
GetTempPathW
GetTempFileNameW
GetTapeParameters
GetModuleHandleW
GetModuleHandleA
GetLastError
GetCurrentThreadId
UnhandledExceptionFilter
UnmapViewOfFile
WriteFileEx
lstrcpynW
LeaveCriticalSection
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
CreateFileMappingW
CreateFileW
CreateProcessW
CreateThread
EnterCriticalSection
crypt32
CertFindCertificateInStore
CertFreeCertificateContext
CertNameToStrW
CertOpenStore
CertCloseStore
user32
SetScrollRange
SetClassLongW
PeekMessageA
EnumChildWindows
DispatchMessageA
CountClipboardFormats
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ