Static task
static1
Behavioral task
behavioral1
Sample
151d1b1d57f72c9af60dfde22d363c6f210c7cf741102dab79ca4d3646722dc5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
151d1b1d57f72c9af60dfde22d363c6f210c7cf741102dab79ca4d3646722dc5.exe
Resource
win10v2004-20220901-en
General
-
Target
151d1b1d57f72c9af60dfde22d363c6f210c7cf741102dab79ca4d3646722dc5
-
Size
1.7MB
-
MD5
6648a2a372199dfdd4cd91b746c13fac
-
SHA1
30233caa2c75373eaa3c9933285ecc8081ded399
-
SHA256
151d1b1d57f72c9af60dfde22d363c6f210c7cf741102dab79ca4d3646722dc5
-
SHA512
9bf3c3097f2021d1cb30398729303ee6d7124612593055171eeb71a93c20df6a736f050e847960a06f21b48773938b92b34dc53eecaf661c454ac4e969c47a73
-
SSDEEP
24576:hYFANfzHOLSh+TwW+40MDW5cMw/jjrwN5IXPa7kTTuVb45:hRCKW+SDleKTuVbY
Malware Config
Signatures
Files
-
151d1b1d57f72c9af60dfde22d363c6f210c7cf741102dab79ca4d3646722dc5.exe windows x86
632fc5b15575a75c4db5ba8301cbd470
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemWindowsDirectoryA
GetCPInfo
ClearCommBreak
IsBadStringPtrA
GetDriveTypeA
GetDefaultCommConfigA
GlobalReAlloc
WriteConsoleOutputA
SetFileApisToOEM
GetWindowsDirectoryA
GetFileInformationByHandle
ReadConsoleInputA
VirtualAlloc
GetVersion
QueueUserAPC
GetSystemPowerStatus
GetSystemWindowsDirectoryA
VerSetConditionMask
WriteProcessMemory
GetFileSize
IsProcessorFeaturePresent
dpnet
DirectPlay8Create
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 468KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 398KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ