Static task
static1
Behavioral task
behavioral1
Sample
d3d80ccdb01fd01e99d8c0c2f12d1a5f425155bb1a9ce36bb80cc76189a05d4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d3d80ccdb01fd01e99d8c0c2f12d1a5f425155bb1a9ce36bb80cc76189a05d4a.exe
Resource
win10v2004-20221111-en
General
-
Target
d3d80ccdb01fd01e99d8c0c2f12d1a5f425155bb1a9ce36bb80cc76189a05d4a
-
Size
214KB
-
MD5
28bb5255c7f718c3b9ad1d9b643dd354
-
SHA1
599e5e14e1bdc61ac1ee4faf220b5b6727be1986
-
SHA256
d3d80ccdb01fd01e99d8c0c2f12d1a5f425155bb1a9ce36bb80cc76189a05d4a
-
SHA512
085db9c1d7de6452a4f8ce46cf2a77942d7b99e962e36a1e600c263d46cb16672f2cca8e9b3c8f2ea7a60c3adca23dc4b67cabacecc094e36b15dbccc2f5dcb0
-
SSDEEP
3072:JcMFD4c9t444J5DCCcbMLfD/eGF3UvgBPD3dK8lQicYWefTmochwCl3OzaW0SdGj:LD4mj4JFJcbseGdUvUs8lY7Ozat
Malware Config
Signatures
Files
-
d3d80ccdb01fd01e99d8c0c2f12d1a5f425155bb1a9ce36bb80cc76189a05d4a.exe windows x86
a7134995c80266ddb0e4b994a24279e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
schannel
QuerySecurityPackageInfoW
QueryContextAttributesW
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoA
MakeSignature
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
kernel32
GetCurrentProcess
LockResource
QueryPerformanceCounter
HeapAlloc
SetLastError
FindResourceA
GetTickCount
SetUnhandledExceptionFilter
CreateFileA
MultiByteToWideChar
HeapFree
GetProcessHeap
lstrcmpA
GetCurrentProcessId
QueryDosDeviceA
GetOEMCP
CloseHandle
GetSystemTimeAsFileTime
LoadLibraryW
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
GetLocalTime
lstrlenA
GetLocaleInfoW
WideCharToMultiByte
secur32
FreeCredentialsHandle
FreeContextBuffer
ExportSecurityContext
EnumerateSecurityPackagesW
GetComputerObjectNameA
scecli
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceAnalyzeSystem
SceCloseProfile
SceBrowseDatabaseTable
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ