Static task
static1
Behavioral task
behavioral1
Sample
d041430f4192c53d12b270ddaf6c1d8ccc95fc815951669bb8642a81025b8ed9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d041430f4192c53d12b270ddaf6c1d8ccc95fc815951669bb8642a81025b8ed9.exe
Resource
win10v2004-20220812-en
General
-
Target
d041430f4192c53d12b270ddaf6c1d8ccc95fc815951669bb8642a81025b8ed9
-
Size
68KB
-
MD5
7aeb72be86da1dc53788a92490441ee0
-
SHA1
c61b53b85c538dc46254c4f1da7717a29a3b27f3
-
SHA256
d041430f4192c53d12b270ddaf6c1d8ccc95fc815951669bb8642a81025b8ed9
-
SHA512
f1954da4f44b419ed784b9a2bdc86bc99e28d8cb0afbf6e938e35458f7771dd91b73b7ccbf7c947ee21fd5d93985157eed99b7ac2fc990da8142450a69e0290e
-
SSDEEP
768:LK9pu41eZo7hB0l4HMwQzTEAtvivG0OHOA02y508vDcUnGwMcClyRzR:OzuhW7hBq4HMw9hOHhC5/75qlyRz
Malware Config
Signatures
Files
-
d041430f4192c53d12b270ddaf6c1d8ccc95fc815951669bb8642a81025b8ed9.exe windows x86
673c96a884cde22f09705f2eedadba49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetLastError
FreeLibrary
LoadLibraryA
Sleep
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
ws2_32
WSAStartup
gethostname
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE