Static task
static1
Behavioral task
behavioral1
Sample
d76741dde812c167789ec7cc5e4f46b5d86617dbffeefcbb6745f0a87d70529f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d76741dde812c167789ec7cc5e4f46b5d86617dbffeefcbb6745f0a87d70529f.exe
Resource
win10v2004-20220812-en
General
-
Target
d76741dde812c167789ec7cc5e4f46b5d86617dbffeefcbb6745f0a87d70529f
-
Size
132KB
-
MD5
450508d9fff41c92120251ee936cd0f5
-
SHA1
c64e7e87bf03cc8269323fc7ff8c3ec0b9dbb97d
-
SHA256
d76741dde812c167789ec7cc5e4f46b5d86617dbffeefcbb6745f0a87d70529f
-
SHA512
ce87afe6d689854d1fae9c6dc276136408922e25a4f43066358463422c4149332773909e9f26827f65c30ae08a2644f1f4f0e189129b9bd944473dd58b22ee16
-
SSDEEP
3072:QWCUZzWRmH//SaR4f3Srdq7gVrBDyieIcKGjNndau:t+mHX6f3yBQPBn
Malware Config
Signatures
Files
-
d76741dde812c167789ec7cc5e4f46b5d86617dbffeefcbb6745f0a87d70529f.exe windows x86
8055ba775ca6b6c6b5b0c0ae8ed352f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Options_RunDLL
ExtractIconW
SHBrowseForFolder
SHFileOperationA
ExtractIconA
comdlg32
PrintDlgExW
dwOKSubclass
ReplaceTextW
ChooseColorA
PrintDlgA
Sections
.text Size: 89KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE