Static task
static1
Behavioral task
behavioral1
Sample
1d9511a0822b3ec8902e6a6894da26f43517a5ec147e92df1bcb01b0fd694857.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1d9511a0822b3ec8902e6a6894da26f43517a5ec147e92df1bcb01b0fd694857.exe
Resource
win10v2004-20220812-en
General
-
Target
1d9511a0822b3ec8902e6a6894da26f43517a5ec147e92df1bcb01b0fd694857
-
Size
720KB
-
MD5
ce1f191bfc9a98c56072235b4bcc03e4
-
SHA1
7a1b2bd2d47d0140f4ab9e7e7a6ed4b696d45b27
-
SHA256
1d9511a0822b3ec8902e6a6894da26f43517a5ec147e92df1bcb01b0fd694857
-
SHA512
114c2cb427114090ae9a316be6afdd5bc4697efdfe0748537973080e6c45389f8b177c26ef78573919b366c4efaa83364b1942cfb6b6a254f783087b5dba4fa1
-
SSDEEP
12288:PviiRYG8wKRQu2Fww8thNu9SWNMN/JWLs2Ez31DIoAXycpJGfl:P6iOvRQRp8V2S0MbWo24lkoSw
Malware Config
Signatures
Files
-
1d9511a0822b3ec8902e6a6894da26f43517a5ec147e92df1bcb01b0fd694857.exe windows x86
3492a7a37dd69954f8f4580079a9e7ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
FreeEnvironmentStringsW
GetTempFileNameW
lstrcatA
GetModuleFileNameA
EnumResourceTypesA
FileTimeToSystemTime
EnumDateFormatsExW
EnumResourceLanguagesW
SetFileAttributesA
GetVersionExA
IsBadWritePtr
LocalCompact
CreateJobObjectA
lstrcatW
GlobalUnlock
GetProcessTimes
FindAtomA
GetPrivateProfileStructA
FindNextVolumeW
_llseek
FindNextVolumeMountPointA
GetSystemWindowsDirectoryW
SetFileApisToOEM
FindResourceA
SizeofResource
CreateSemaphoreA
GetModuleHandleA
EnumResourceTypesW
GetLocaleInfoW
Process32First
CreateJobObjectW
GetEnvironmentVariableW
SetSystemTime
WaitForDebugEvent
CreateWaitableTimerA
IsDBCSLeadByteEx
CreateMailslotA
CreateNamedPipeA
GetStringTypeW
CreateHardLinkA
SetMailslotInfo
SetFileAttributesW
FileTimeToDosDateTime
GetSystemDefaultLangID
GetProcessShutdownParameters
CreateIoCompletionPort
GetCurrentThreadId
CreateTimerQueueTimer
InterlockedExchangeAdd
ConnectNamedPipe
CreateWaitableTimerW
CreateDirectoryExW
GlobalDeleteAtom
LocalAlloc
LocalFree
CompareStringW
GlobalGetAtomNameW
GlobalAddAtomA
EnumTimeFormatsA
SetEnvironmentVariableW
RequestWakeupLatency
GetFileAttributesExW
GetCalendarInfoA
WriteFileGather
IsBadStringPtrA
EnumUILanguagesA
FileTimeToLocalFileTime
WaitNamedPipeA
LocalReAlloc
DosDateTimeToFileTime
GetQueuedCompletionStatus
UpdateResourceW
WriteProfileSectionA
GetSystemTimeAsFileTime
SetTapePosition
FreeResource
InterlockedExchange
DeleteVolumeMountPointA
SetTimeZoneInformation
SetCalendarInfoA
GetDefaultCommConfigA
EnumSystemLanguageGroupsW
DebugBreak
GetAtomNameA
Process32NextW
GetThreadTimes
SetProcessWorkingSetSize
GetThreadPriorityBoost
SetTapeParameters
BackupWrite
OpenEventW
FatalExit
QueueUserAPC
lstrcmpW
FormatMessageW
GetCurrencyFormatW
GlobalWire
GetCommMask
SetEvent
GetTempFileNameA
CreateFileMappingA
AssignProcessToJobObject
BindIoCompletionCallback
user32
ActivateKeyboardLayout
MessageBoxW
SetLayeredWindowAttributes
SetKeyboardState
OpenInputDesktop
IntersectRect
HideCaret
DrawCaption
MessageBoxIndirectW
AttachThreadInput
CharLowerBuffW
IsRectEmpty
DrawAnimatedRects
GetSysColor
PtInRect
GetKeyboardLayout
GetMessageA
ToUnicode
GetFocus
GetDoubleClickTime
shlwapi
PathAppendA
PathCombineA
Sections
.text Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 671KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ