Static task
static1
Behavioral task
behavioral1
Sample
d958ceed05ea399726d081aa48eeea7e3af164dba39ed8c26e7376343189b385.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d958ceed05ea399726d081aa48eeea7e3af164dba39ed8c26e7376343189b385.exe
Resource
win10v2004-20221111-en
General
-
Target
d958ceed05ea399726d081aa48eeea7e3af164dba39ed8c26e7376343189b385
-
Size
132KB
-
MD5
db06abf96b2588ba3503e889374c11e2
-
SHA1
e11c8949e7d99f063c67b2b531eae97b43fea4d4
-
SHA256
d958ceed05ea399726d081aa48eeea7e3af164dba39ed8c26e7376343189b385
-
SHA512
2f8b617e5ad86fc3a5fbce431fcd3aae404946ad0b88de9f125d9bffbcb07e3def2576ba037069b18a49e97c32e128b1633c8cf16fb5c8e370f3d9ab3af4dcf7
-
SSDEEP
3072:fE847uzeZiZbsBPmxmNtdfykZe64y7JR:M8IuzpZbRx+Ze64y
Malware Config
Signatures
Files
-
d958ceed05ea399726d081aa48eeea7e3af164dba39ed8c26e7376343189b385.exe windows x86
d097e458bd1a78d5e5d6072528e354e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigTransportCreate
urlmon
ReleaseBindInfo
kernel32
WriteProfileSectionA
OpenProcess
GetModuleHandleA
ExitThread
GetDateFormatW
SetLocaleInfoW
FindFirstChangeNotificationA
FindNextFileW
EnumTimeFormatsA
user32
EnableWindow
setupapi
SetupGetLineTextA
msvcrt
sin
isspace
ferror
isalpha
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
= Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ