Static task
static1
Behavioral task
behavioral1
Sample
d0f7ea9c8d3243afa1ba03275a8ffef1f337eca70c0069bf7d4a2af5b6571c41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d0f7ea9c8d3243afa1ba03275a8ffef1f337eca70c0069bf7d4a2af5b6571c41.exe
Resource
win10v2004-20220812-en
General
-
Target
d0f7ea9c8d3243afa1ba03275a8ffef1f337eca70c0069bf7d4a2af5b6571c41
-
Size
209KB
-
MD5
851b37e25cc910137eeca44f8cd399b0
-
SHA1
32cb023685d0cb0a85007afcd2ca1174161ae23f
-
SHA256
d0f7ea9c8d3243afa1ba03275a8ffef1f337eca70c0069bf7d4a2af5b6571c41
-
SHA512
dfa1bab3ac1f0ebbf44aae89f0a188d7084d5faff3e4406060c5cc6515e471e7ca1ab8b616b39e3494aaf17812754821d5094e3511f4ed3ac613777f1dbe522a
-
SSDEEP
6144:+AgzXS+PNfbRwk7IrgTYbMVZkNhTEfR7rOmoI:+HXS+PN9Erg+M7k/wfR+m9
Malware Config
Signatures
Files
-
d0f7ea9c8d3243afa1ba03275a8ffef1f337eca70c0069bf7d4a2af5b6571c41.exe windows x86
f020e1a2feae651f7ce88318f285b500
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
.text Size: 81KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YHFSDERT Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE