Static task
static1
Behavioral task
behavioral1
Sample
d1a9c369424e192192234ec70ae5022e542393dc047d398efcad6f4d845b7a19.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1a9c369424e192192234ec70ae5022e542393dc047d398efcad6f4d845b7a19.exe
Resource
win10v2004-20220812-en
General
-
Target
d1a9c369424e192192234ec70ae5022e542393dc047d398efcad6f4d845b7a19
-
Size
751KB
-
MD5
a2801ecd8abecafa622df9a2462ee756
-
SHA1
83566d333fdaa093904d8b3836a029f47eeb2853
-
SHA256
d1a9c369424e192192234ec70ae5022e542393dc047d398efcad6f4d845b7a19
-
SHA512
357481a638316a096614dc24c69d63bf2072587475170ccc7ba412bff1ab996b4ddd2df472b5458e6535e34d637044fcff58cb7b8d5c079155456f9b66b08f05
-
SSDEEP
12288:WkAoTZGPjg3XG2V8IuqWyIpOLPgkDbkI6i2366R5wfDH5Wk:1AoT4PjKXVZ9PFAI7P6UDZWk
Malware Config
Signatures
Files
-
d1a9c369424e192192234ec70ae5022e542393dc047d398efcad6f4d845b7a19.exe windows x86
8d16f93327b22c5bd1efc614df04011b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
WaitForSingleObject
VirtualAlloc
GetStdHandle
OpenProcess
GetFileAttributesA
GetConsoleTitleA
ResetEvent
CreateMutexA
HeapSize
GetStartupInfoW
GetTickCount
DeleteFileA
GetCommandLineW
CloseHandle
GetEnvironmentVariableW
SetLastError
CreatePipe
RemoveDirectoryA
WaitForMultipleObjects
CreateFileA
FindClose
GetCurrentDirectoryA
ExitProcess
GetModuleHandleA
user32
GetWindowLongA
MessageBoxA
GetClassInfoA
FillRect
GetDC
CallWindowProcW
DispatchMessageW
GetDC
GetDC
PeekMessageA
FindWindowW
DispatchMessageW
GetSysColor
ureg
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 745KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ