Static task
static1
Behavioral task
behavioral1
Sample
d760a8c48a7b933ccfe4a74d6bf1ed99ef621d3560f9ce923bfd0848c86e4555.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d760a8c48a7b933ccfe4a74d6bf1ed99ef621d3560f9ce923bfd0848c86e4555.exe
Resource
win10v2004-20220812-en
General
-
Target
d760a8c48a7b933ccfe4a74d6bf1ed99ef621d3560f9ce923bfd0848c86e4555
-
Size
287KB
-
MD5
260cf67dce79c31733d04f948e2aab59
-
SHA1
9aad0dc12fa1f052cb7ba0a83ebdd354e714da29
-
SHA256
d760a8c48a7b933ccfe4a74d6bf1ed99ef621d3560f9ce923bfd0848c86e4555
-
SHA512
791c317ed47d55687053bd76280c0b739e1bed0754c42da9568806969eab43ab83efa95a7bd746ddf870afcc677c193d322ba97a733e3d0a2c21dd85b1218737
-
SSDEEP
6144:Hx8G02TV7qpY2c+y5rvQyvgVjg6IjRkJYhg45dXyKg0ZT9Ydm:Hx8G069Sdby5T5OnINkJYhfM0ZhCm
Malware Config
Signatures
Files
-
d760a8c48a7b933ccfe4a74d6bf1ed99ef621d3560f9ce923bfd0848c86e4555.exe windows x86
0dfef9fa3adfed33c47da73bc85493f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCurrentThreadId
GetOEMCP
GlobalReAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
GetModuleFileNameW
GetModuleHandleA
ExpandEnvironmentStringsW
SetConsoleCP
TerminateProcess
HeapAlloc
TlsAlloc
GetACP
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
LockResource
SetStdHandle
lstrcmpA
FileTimeToSystemTime
gdi32
SetBkColor
GetStockObject
advapi32
AllocateAndInitializeSid
msvcrt
realloc
_unlock
user32
MessageBoxW
SetActiveWindow
UnregisterClassW
PostMessageA
DestroyWindow
OffsetRect
ole32
StgSetTimes
lz32
LZClose
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ