Static task
static1
Behavioral task
behavioral1
Sample
d53484bb675dd1f2f9b9c148b2e96a0f8f8c7f650608d70e2e22361247e7ce39.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d53484bb675dd1f2f9b9c148b2e96a0f8f8c7f650608d70e2e22361247e7ce39.exe
Resource
win10v2004-20221111-en
General
-
Target
d53484bb675dd1f2f9b9c148b2e96a0f8f8c7f650608d70e2e22361247e7ce39
-
Size
66KB
-
MD5
fecbf695adc64bcd751dea94bedb6bb3
-
SHA1
afb87eb433c38a569e228292e0508fc1d16a10fe
-
SHA256
d53484bb675dd1f2f9b9c148b2e96a0f8f8c7f650608d70e2e22361247e7ce39
-
SHA512
9d4a58587c91cd2ba926353c511fd60bf1d15ed10c808cb6c04b5e9600d3e0761840c8f291c119c4396421d8f9146164e97da4833895ddfdd0b4c6e8758438ac
-
SSDEEP
1536:t5Yhv7kGs96YauBB8PeDsU/VsiBhoulug3QGa1vv8LriFi:tivcgmjsuBIiuGQF1vv8LW
Malware Config
Signatures
Files
-
d53484bb675dd1f2f9b9c148b2e96a0f8f8c7f650608d70e2e22361247e7ce39.exe windows x86
2c2a0d10e76531a2bd5094370a574c80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessAffinityMask
lstrcpyn
DebugActiveProcess
SetFilePointerEx
WriteConsoleInputVDMW
ClearCommError
RegisterConsoleOS2
GetEnvironmentStrings
FindAtomW
RegisterWaitForSingleObject
BaseUpdateAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE