Static task
static1
Behavioral task
behavioral1
Sample
7fdd2b634e3d2eb0f30b689c92f12935db21f5fdb9f190f9155503ddda6e83bc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7fdd2b634e3d2eb0f30b689c92f12935db21f5fdb9f190f9155503ddda6e83bc.exe
Resource
win10v2004-20221111-en
General
-
Target
7fdd2b634e3d2eb0f30b689c92f12935db21f5fdb9f190f9155503ddda6e83bc
-
Size
1.5MB
-
MD5
d206eaa7b6f3f87aa351a4308e9c74bc
-
SHA1
883f2582701e2dbbc05d166897b54cb078b37df8
-
SHA256
7fdd2b634e3d2eb0f30b689c92f12935db21f5fdb9f190f9155503ddda6e83bc
-
SHA512
5ce6a1089adaf1a576c85f54adce96217272effd1550b39547a050d80588b688c2b27561b1697030cb976f39687df1ebbabc370911e45ac26990c39bcef75857
-
SSDEEP
24576:36hRZf9b3NNKv5hSlXdqPeIFtT1ifLAbnSIiEoPx:YRZf9bdYv5AlXdqGaR1if/
Malware Config
Signatures
Files
-
7fdd2b634e3d2eb0f30b689c92f12935db21f5fdb9f190f9155503ddda6e83bc.exe windows x86
314a8e14a8d7f8fdce5ae404fa086d52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerifyVersionInfoA
FindNextVolumeMountPointA
SetComputerNameExA
GlobalFix
LZCloseFile
GetVersion
GetProfileIntA
IsProcessorFeaturePresent
VirtualAlloc
WriteConsoleA
SetThreadContext
EndUpdateResourceA
ReadConsoleInputA
EnumResourceNamesA
ClearCommError
GetThreadPriority
GetNumberFormatA
SetProcessPriorityBoost
HeapFree
GetConsoleMode
GetCommState
GetVersionExA
GetTempPathA
FileTimeToLocalFileTime
dpnlobby
DirectPlay8LobbyCreate
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 832KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ