Static task
static1
Behavioral task
behavioral1
Sample
d15afaaade80acf37237825077c68a99cc9de783cb9391b9d5339bd969376497.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d15afaaade80acf37237825077c68a99cc9de783cb9391b9d5339bd969376497.exe
Resource
win10v2004-20221111-en
General
-
Target
d15afaaade80acf37237825077c68a99cc9de783cb9391b9d5339bd969376497
-
Size
58KB
-
MD5
e3f3a34e2d8e0c40bd9c4e8cd62e9226
-
SHA1
fbef637e9b9bbd87d971f537e1cf4f12475cc89c
-
SHA256
d15afaaade80acf37237825077c68a99cc9de783cb9391b9d5339bd969376497
-
SHA512
df69d02985085c7bf3b780a91d6467b4e6ba06823829ef69e9e9babf7236507b834520cea24b9dc0feafdd2c14e5d105779a5b08f0157f4f5ea0a129e8f88c6d
-
SSDEEP
768:/Xw829ZiUzAr4rS6heyY1soCG4IXXLrXhYGJYStd+0m1UmMsPOq:Y82bi4uSS6MyYuoqIXXLrXzuef9j
Malware Config
Signatures
Files
-
d15afaaade80acf37237825077c68a99cc9de783cb9391b9d5339bd969376497.exe windows x86
ea9083d6daf4a96a9f4175e7977aa0a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CreateMutexA
CloseHandle
TlsGetValue
GetStdHandle
GetModuleHandleA
SetLastError
LoadLibraryExA
GetProcessHeap
lstrcpyA
GetEnvironmentVariableA
CreateFileW
lstrlenW
HeapCreate
GlobalUnlock
ReleaseMutex
GlobalFree
GetCurrentThreadId
GetExitCodeProcess
UnmapViewOfFile
user32
CallWindowProcA
GetCaretPos
CreateWindowExA
GetDlgItem
CheckRadioButton
IsWindow
GetDC
FillRect
CreateMenu
DrawEdge
SetFocus
DispatchMessageA
DrawMenuBar
rsaenh
CPDecrypt
CPDeriveKey
CPGenKey
CPHashData
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jwrmooo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE