Static task
static1
Behavioral task
behavioral1
Sample
d149680100b05acac7f3e247ecbcddd93b9ed70497d57c8e53b3fbc6f20f3286.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d149680100b05acac7f3e247ecbcddd93b9ed70497d57c8e53b3fbc6f20f3286.exe
Resource
win10v2004-20220812-en
General
-
Target
d149680100b05acac7f3e247ecbcddd93b9ed70497d57c8e53b3fbc6f20f3286
-
Size
304KB
-
MD5
016abcfca6c8987a607a5c5ae321bac5
-
SHA1
a055fe764d8c723b0bbcd93e0ed12f407febd85a
-
SHA256
d149680100b05acac7f3e247ecbcddd93b9ed70497d57c8e53b3fbc6f20f3286
-
SHA512
6941c35f31f9ecba1843d51f7c86430e1e3c8aec1a762180c9d8bc0a4ea9c44ff0f311605d633dbf6df8bbc64befe08ed2c0e30d603d32c0480a2deecadf4b05
-
SSDEEP
6144:yxOJX12g24MrlYgRYD+b7V2vZEEuRTS+XhFqUry3QyTVzcN:yiLTMrlSQV2vZEE4BvrIQyTVz
Malware Config
Signatures
Files
-
d149680100b05acac7f3e247ecbcddd93b9ed70497d57c8e53b3fbc6f20f3286.exe windows x86
e8d02bdbcd3db4ebf5f637c42963be3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
LoadLibraryA
SetLastError
GetTickCount
DeleteFileW
Sleep
GetStartupInfoA
GlobalFree
GetFileAttributesA
CloseHandle
GetProcessHeap
VirtualProtectEx
WriteConsoleA
SetLastError
CreateMutexA
CreateDirectoryW
lstrlenA
SetEvent
CreateSemaphoreA
HeapSize
CreateHardLinkW
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
vdmdbg
VDMBreakThread
VDMDetectWOW
VDMGetContext
VDMGetPointer
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE