Static task
static1
Behavioral task
behavioral1
Sample
d1e02bdd98114d39cfee782fa4067a035d4d77d81347e088ed4986f1cdf7589d.exe
Resource
win7-20221111-en
General
-
Target
d1e02bdd98114d39cfee782fa4067a035d4d77d81347e088ed4986f1cdf7589d
-
Size
184KB
-
MD5
255e4eafce3a7615aa2ea9081a9768c1
-
SHA1
579f7d58bef31349cd0dd6e55818c6a18f8b8919
-
SHA256
d1e02bdd98114d39cfee782fa4067a035d4d77d81347e088ed4986f1cdf7589d
-
SHA512
5069e499e99b008957575ac1eaea99ca27064f85c43be71aa9305ce702f4a96fc590404a607abe1172c4e0132073fbb65cd17d206c24a6610357021a0659e822
-
SSDEEP
3072:9LMU+HvgF7KoVDXPD3I5GmdHZutWq89FIwomRxd00yfzh5ewwQqZV6eDj+vPJx:9Le3yX7cHfL9ewomRA0WJfqr6TvPn
Malware Config
Signatures
Files
-
d1e02bdd98114d39cfee782fa4067a035d4d77d81347e088ed4986f1cdf7589d.exe windows x86
b0c78f55885abed790760246fc808602
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemInfo
BaseInitAppcompatCacheSupport
IsBadReadPtr
WideCharToMultiByte
GetProcAddress
MultiByteToWideChar
GetSystemDirectoryA
Sleep
EnumResourceTypesA
CloseHandle
lstrcpyA
CreateMailslotA
GetDiskFreeSpaceA
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
lstrlenW
MoveFileExA
oleacc
AccessibleChildren
CreateStdAccessibleProxyA
gdi32
GetStockObject
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ