Static task
static1
Behavioral task
behavioral1
Sample
d171762c363f79c7b3a663d72f195dbc72e6d585d1ed4f6ae8550afbd59a9abc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d171762c363f79c7b3a663d72f195dbc72e6d585d1ed4f6ae8550afbd59a9abc.exe
Resource
win10v2004-20220812-en
General
-
Target
d171762c363f79c7b3a663d72f195dbc72e6d585d1ed4f6ae8550afbd59a9abc
-
Size
105KB
-
MD5
b381f4f0ac4ae381cab6481e0288b0a2
-
SHA1
22accc11b8ea40c46044ad26496702d56ade7634
-
SHA256
d171762c363f79c7b3a663d72f195dbc72e6d585d1ed4f6ae8550afbd59a9abc
-
SHA512
ee0f6c8ace3d1f0f9ac9888e50aaea661b2f15e2c285303774b01fcd800d5c935c9cfe37b25dccc07b7bf833a44495e79d2640aeffdc013856d41fd0c5572901
-
SSDEEP
3072:lSdS1fjbESJjbMvctb+jsRSHEdvNQHi9yfo968UFkL8w2IxA:hfj4SR+0b+wRiYFqiUs6nk4w21
Malware Config
Signatures
Files
-
d171762c363f79c7b3a663d72f195dbc72e6d585d1ed4f6ae8550afbd59a9abc.exe windows x86
28bb9d4f326513a66995de3890982696
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
CreateToolbarEx
ImageList_Create
ImageList_ReplaceIcon
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
LoadLibraryA
MapViewOfFileEx
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcmpA
lstrcpyA
lstrlenA
shlwapi
StrToIntExA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 101KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ