Static task
static1
Behavioral task
behavioral1
Sample
71e7c434bb88503ead326223a1ca338b64a105456b73ead08231f649ad589015.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
71e7c434bb88503ead326223a1ca338b64a105456b73ead08231f649ad589015.exe
Resource
win10v2004-20221111-en
General
-
Target
71e7c434bb88503ead326223a1ca338b64a105456b73ead08231f649ad589015
-
Size
2.5MB
-
MD5
b42dd0c11f63acf98dc8e0d7327a63ea
-
SHA1
48ababb1938dc891b7259cbff13f39d4fff3a689
-
SHA256
71e7c434bb88503ead326223a1ca338b64a105456b73ead08231f649ad589015
-
SHA512
42f2491991153650c9ee0594de478b7729ceebd6d9b88f5953d479c665eebbf4bb78a36a83e5d64850bee40d371899a86f4bdc554fb713cd3e45254a099594bd
-
SSDEEP
49152:LNoDDjHxdQ+/CPb18CvyXo+GU1xjCOi3OtQB1xFBlHCqH4/5TA3U8P9b0:i/jHxdT/jXEwxx2oQnxM5TA37P90
Malware Config
Signatures
Files
-
71e7c434bb88503ead326223a1ca338b64a105456b73ead08231f649ad589015.exe windows x86
4a279d3964f5f664e18b880dd1779c6c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_llseek
GlobalDeleteAtom
GetStartupInfoA
SetThreadLocale
lstrcpynA
LoadLibraryA
GetFileAttributesA
OpenWaitableTimerA
GetVolumePathNameA
GlobalFindAtomA
Module32Next
GetFileTime
AddAtomW
GetConsoleCursorMode
VirtualAlloc
GetDriveTypeA
FindFirstVolumeA
GetDiskFreeSpaceExA
GetCurrencyFormatA
GetCurrentThread
IsProcessorFeaturePresent
d3d9
Direct3DCreate9
advapi32
CredDeleteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 310KB - Virtual size: 855KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ