Static task
static1
Behavioral task
behavioral1
Sample
d2eef79b5bd1b8d9f72fdd06d43552579127d1773325be8b80e8305aa31cb086.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d2eef79b5bd1b8d9f72fdd06d43552579127d1773325be8b80e8305aa31cb086.exe
Resource
win10v2004-20221111-en
General
-
Target
d2eef79b5bd1b8d9f72fdd06d43552579127d1773325be8b80e8305aa31cb086
-
Size
118KB
-
MD5
fa71e0f33c8035ac27143fdaa3ec53df
-
SHA1
fdbe0c081108b48389e337ddda5e2eb87a420bc9
-
SHA256
d2eef79b5bd1b8d9f72fdd06d43552579127d1773325be8b80e8305aa31cb086
-
SHA512
1387c9ff618b55f210f595de23929076d159385552b66d31f2abcda2e5c094f4babe4d814d0ee2beb7b5a34fe362f84be0f794210461e59aa1b251943fabd300
-
SSDEEP
3072:VTS1kI5EvTWAewwhLDn/xeah7A2NDkwzhBtdfCrePAQ1rOQPXZ89l1oY:VG1/5EvTTKvn/xewA4hjpCaoUZPXZ89r
Malware Config
Signatures
Files
-
d2eef79b5bd1b8d9f72fdd06d43552579127d1773325be8b80e8305aa31cb086.exe windows x86
98ceb0313ec5b3cd28c6a8225d80d8fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateConsoleScreenBuffer
CreateEventA
DisconnectNamedPipe
ExitProcess
FindAtomA
FindNextChangeNotification
FlushInstructionCache
GetAtomNameA
GetCommTimeouts
GetCommandLineA
GetExitCodeProcess
GetFullPathNameA
GetHandleInformation
GetLastError
GetLogicalDriveStringsA
GetLogicalDrives
GetModuleHandleA
GetPrivateProfileSectionNamesA
GetPrivateProfileStructA
GetProcAddress
GetProcessAffinityMask
GetProfileSectionA
GetStartupInfoA
GlobalCompact
GlobalReAlloc
HeapCreate
IsValidCodePage
LoadLibraryA
LocalCompact
LocalSize
LocalUnlock
MapViewOfFile
MapViewOfFileEx
PostQueuedCompletionStatus
ResumeThread
SetEvent
SetFileTime
SetUnhandledExceptionFilter
VirtualProtect
VirtualProtectEx
WriteFile
WriteProcessMemory
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
free
malloc
memset
rand
signal
srand
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE