Static task
static1
Behavioral task
behavioral1
Sample
d445767325a3ae6d7b8a352fe5838b4fa193cd27aa3c3cf8fa0ad4495a5233a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d445767325a3ae6d7b8a352fe5838b4fa193cd27aa3c3cf8fa0ad4495a5233a4.exe
Resource
win10v2004-20220901-en
General
-
Target
d445767325a3ae6d7b8a352fe5838b4fa193cd27aa3c3cf8fa0ad4495a5233a4
-
Size
367KB
-
MD5
fc016fde97fc7ef054517831fb456dac
-
SHA1
9dabef0c8ac6b9de04e34b15f321386326a16ae8
-
SHA256
d445767325a3ae6d7b8a352fe5838b4fa193cd27aa3c3cf8fa0ad4495a5233a4
-
SHA512
745ebc18361ad65267272d60be5d87b76e9c12429bd1b36ec6da0438507f053b2c217cdf093e05daf4556847f771033955aecf0ecf0ca06f51ad32edd9eabf5b
-
SSDEEP
6144:WeoVSHv7J0ziq5XdL6wa5x3LyftRFQuh6Dji8Q1WvE2f8hp1Fy/:+cHlReXpPFrUvJf8hpA
Malware Config
Signatures
Files
-
d445767325a3ae6d7b8a352fe5838b4fa193cd27aa3c3cf8fa0ad4495a5233a4.exe windows x86
44ff4377e78597fe496d1112af177b0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
GlobalUnlock
Sleep
SetLastError
FindClose
CloseHandle
CreateFileW
lstrcpyA
GetCommandLineA
LoadLibraryExW
LocalFree
GetComputerNameA
lstrlenA
GetModuleHandleA
UnmapViewOfFile
CreateProcessA
FindResourceW
HeapCreate
GetCurrentThreadId
GetCurrentDirectoryA
user32
CallWindowProcA
CreateWindowExA
GetCaretPos
IsWindow
SetFocus
DrawMenuBar
CreateIcon
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
CheckRadioButton
FillRect
rsaenh
CPHashData
CPDeriveKey
CPGenKey
CPSignHash
CPDecrypt
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ