Static task
static1
Behavioral task
behavioral1
Sample
d1869a43228b6bca33bcecf10ce9dcb9f357d40e32f7cbaf0788f2e10346dc0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1869a43228b6bca33bcecf10ce9dcb9f357d40e32f7cbaf0788f2e10346dc0d.exe
Resource
win10v2004-20220812-en
General
-
Target
d1869a43228b6bca33bcecf10ce9dcb9f357d40e32f7cbaf0788f2e10346dc0d
-
Size
21KB
-
MD5
45217dd5abdde4e0be4e4482ea752b71
-
SHA1
a8783eb1a1399e7d3e07a3b4df70deb0fe783dc2
-
SHA256
d1869a43228b6bca33bcecf10ce9dcb9f357d40e32f7cbaf0788f2e10346dc0d
-
SHA512
1e6988a18680e21a85b29536684b238c9c6af9189ff46c0876a2694cc72dd1421f8206fa2ad39069d97f04cdf503372240b3e9943d1ea25e1deda7b5e2705d4f
-
SSDEEP
384:DIa/Vjnomel+4R0YZchoYEkIsHjkxSBMoR6Phn/lwDM2towfECULMvI:R/VjNelYhREkdzKoe+w2KMI
Malware Config
Signatures
Files
-
d1869a43228b6bca33bcecf10ce9dcb9f357d40e32f7cbaf0788f2e10346dc0d.exe windows x86
49419aea5f9c44ef4546a9eb1ff09497
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cmdial32
AutoDialFunc
adsnt
DllGetClassObject
kernel32
UnhandledExceptionFilter
LoadLibraryExA
MultiByteToWideChar
GetStdHandle
lstrcpyA
TlsSetValue
GetCurrentThreadId
VirtualAlloc
InterlockedDecrement
SetHandleCount
RtlUnwind
WideCharToMultiByte
FreeEnvironmentStringsW
DeleteCriticalSection
GetVersion
LoadResource
SetConsoleCtrlHandler
lstrcpynA
GetOEMCP
GetShortPathNameA
GetEnvironmentStringsW
TlsFree
FindResourceA
lstrlenA
TerminateProcess
lstrlenW
InitializeCriticalSection
VirtualFree
DisableThreadLibraryCalls
GetModuleFileNameA
HeapReAlloc
GetCurrentThread
GetStringTypeA
FatalAppExitA
InterlockedIncrement
GetModuleHandleA
GetProcAddress
SetLastError
LeaveCriticalSection
HeapDestroy
IsDBCSLeadByte
TlsAlloc
HeapCreate
GetCPInfo
HeapAlloc
lstrcatA
lstrcmpiA
ExitProcess
GetEnvironmentStrings
SizeofResource
GetStringTypeW
TlsGetValue
EnterCriticalSection
IsBadReadPtr
FreeLibrary
IsBadWritePtr
LCMapStringW
GetLastError
LoadLibraryA
HeapFree
SetUnhandledExceptionFilter
IsBadCodePtr
WriteFile
GetACP
GetCommandLineA
GetStartupInfoA
LCMapStringA
GetCurrentProcess
GetFileType
FreeEnvironmentStringsA
dataclen
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE