Static task
static1
Behavioral task
behavioral1
Sample
d3bff4da8b17d7cb391cf13fa25c2761c6b3ff91a45d8e8747aee2137bc2c03b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3bff4da8b17d7cb391cf13fa25c2761c6b3ff91a45d8e8747aee2137bc2c03b.exe
Resource
win10v2004-20220812-en
General
-
Target
d3bff4da8b17d7cb391cf13fa25c2761c6b3ff91a45d8e8747aee2137bc2c03b
-
Size
304KB
-
MD5
e130ae3df5fc325c72086c429fd18303
-
SHA1
de118345a2d7c009b6cdb1ef58002173a47eee91
-
SHA256
d3bff4da8b17d7cb391cf13fa25c2761c6b3ff91a45d8e8747aee2137bc2c03b
-
SHA512
78589438443b7a168170db99fdc1454c485e4ab12d3132d7b4f8c14b083fb6f2700d958ba16b23c86f5b72145ddca0d83d509f4cba7460c2c297e550cd494cf9
-
SSDEEP
6144:4e1ewbo3Zo/UzMmCKqKVJgLiZDWDpbuejxzb1STlSxdbr1f7oTae:4keDpLEIg+ZDuduejZbzbr1zu
Malware Config
Signatures
Files
-
d3bff4da8b17d7cb391cf13fa25c2761c6b3ff91a45d8e8747aee2137bc2c03b.exe windows x86
fe18171699685be48f9a654d935b42fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA
user32
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
advapi32
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegSetValueA
Sections
.text Size: 287KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ