Static task
static1
Behavioral task
behavioral1
Sample
d789e1f963e1ab8e9c2874083b18cdac5606c20363f3fe139b688bb220a06267.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d789e1f963e1ab8e9c2874083b18cdac5606c20363f3fe139b688bb220a06267.exe
Resource
win10v2004-20221111-en
General
-
Target
d789e1f963e1ab8e9c2874083b18cdac5606c20363f3fe139b688bb220a06267
-
Size
38KB
-
MD5
bdceced029754c1c806c92af62d94681
-
SHA1
656430844b76df8ef3676851c598126a8777114e
-
SHA256
d789e1f963e1ab8e9c2874083b18cdac5606c20363f3fe139b688bb220a06267
-
SHA512
75aae01d412d5d1f6a0c786e988f7e0723eaa151b9d97f7474998196d9e6698590e14816502eb92cb7dd6066bc5926346a83fe066aea74c327b4041caa706653
-
SSDEEP
768:dpwz5Oo51rYr8sqTTOMM6MMMMMMMMM2k9c77777777777777777777777777777a:dW968sqTTOMM6MMMMMMMMM2k9c77777a
Malware Config
Signatures
Files
-
d789e1f963e1ab8e9c2874083b18cdac5606c20363f3fe139b688bb220a06267.exe windows x86
d97d17d9a641a3b5a61211b49db88104
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
Module32First
CreateToolhelp32Snapshot
SetErrorMode
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 514B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ