Static task
static1
Behavioral task
behavioral1
Sample
d95fa3f5690cae4c81173a7415dc7cf183439137df7761f6b53cc25208e80dd4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d95fa3f5690cae4c81173a7415dc7cf183439137df7761f6b53cc25208e80dd4.exe
Resource
win10v2004-20221111-en
General
-
Target
d95fa3f5690cae4c81173a7415dc7cf183439137df7761f6b53cc25208e80dd4
-
Size
130KB
-
MD5
5052591c804e5071e6c89ad76282aea6
-
SHA1
b0ebcd47303ebef62ab825a2abe1020d92728ecd
-
SHA256
d95fa3f5690cae4c81173a7415dc7cf183439137df7761f6b53cc25208e80dd4
-
SHA512
4ede2dd57f19ab0fd316862101993e8c0391daa8e4d5b6783b61b1fa07fa7d6fcad3538bebb553511b46012163be54991caadbac4c8fe8176f3a070a209b6425
-
SSDEEP
3072:NsFym02XIKzu744g0/rKS3whhHJy4ZYb5g:mJ024OuFrX32w4eb5
Malware Config
Signatures
Files
-
d95fa3f5690cae4c81173a7415dc7cf183439137df7761f6b53cc25208e80dd4.exe windows x86
270a59bfc520ed9a3f95184c28c62fee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryW
GetFileSize
RemoveDirectoryA
GetConsoleTitleW
InitializeCriticalSection
GetTickCount
TlsGetValue
WriteConsoleW
VirtualProtectEx
GetCommandLineW
DeleteFileA
ReadFile
EnterCriticalSection
GetCalendarInfoA
CancelIo
lstrlenW
GlobalFree
GetModuleHandleA
CancelIo
GetModuleFileNameA
LeaveCriticalSection
Sleep
CreateFileA
GetStartupInfoA
user32
CreateIcon
IsWindowVisible
DispatchMessageA
GetClassInfoA
MessageBoxA
IsWindow
GetWindowLongA
IsWindowEnabled
wsprintfA
DestroyMenu
GetWindowLongA
PeekMessageA
GetSysColor
console
CPlApplet
CPlApplet
CPlApplet
CPlApplet
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE