Static task
static1
Behavioral task
behavioral1
Sample
d1f8bb1ab7f55863426faf6c67245eef34bbef54cccf9dcfc31a6ba65fafb70a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1f8bb1ab7f55863426faf6c67245eef34bbef54cccf9dcfc31a6ba65fafb70a.exe
Resource
win10v2004-20220812-en
General
-
Target
d1f8bb1ab7f55863426faf6c67245eef34bbef54cccf9dcfc31a6ba65fafb70a
-
Size
537KB
-
MD5
1e1752d377f332352fc490b314896ffd
-
SHA1
856e77cbd0d0745e94d11828c55e443de9b9e034
-
SHA256
d1f8bb1ab7f55863426faf6c67245eef34bbef54cccf9dcfc31a6ba65fafb70a
-
SHA512
286543f2ee6803068617a42f6c55cb5e0696ce615e51c4ac7c078f1f7b16d201709754b070b27d4acac532288fb42c2470f3becc0b841b72f06354068b75851d
-
SSDEEP
12288:6RCi6Y9XujFiOtGfS6UB+YqOszkNX4uo3uz5F6VwfF8Szw7:6RCkuhLKS6pROs+zo3uVFaSw7
Malware Config
Signatures
Files
-
d1f8bb1ab7f55863426faf6c67245eef34bbef54cccf9dcfc31a6ba65fafb70a.exe windows x86
e41399b5a61e18bc52696c6ca964e6f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
dsprop
ErrMsg
FindSheet
shell32
DllUnregisterServer
SHGetFileInfoA
ShellMessageBoxA
StrChrA
ShellAboutA
ExtractIconA
SHFree
DuplicateIcon
SHGetDataFromIDListA
SHCreateShellItem
SHChangeNotify
SHFileOperationA
DragQueryFileA
DragFinish
FindExecutableA
SHGetDesktopFolder
DragAcceptFiles
kernel32
ReadFile
DeviceIoControl
GetVolumePathNameA
CreatePipe
DisconnectNamedPipe
ConnectNamedPipe
CloseHandle
lstrcmpiA
GetProcessHeap
GetModuleFileNameA
GetAtomNameA
GetEnvironmentVariableA
FileTimeToLocalFileTime
InitializeCriticalSection
GetLogicalDrives
GetProcAddress
GetComputerNameA
InterlockedDecrement
FormatMessageA
CreateMailslotA
GetFullPathNameA
lstrcmpA
VirtualQueryEx
GetModuleHandleA
CreateEventA
InterlockedExchange
OpenMutexA
SetCurrentDirectoryA
GetMailslotInfo
GetSystemTime
SetFileAttributesA
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 482KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cdata Size: 15KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ