Static task
static1
Behavioral task
behavioral1
Sample
d3a1d69728d6aa0b4ddef1c77d931690f67f07846ac00b52b570e78894255040.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3a1d69728d6aa0b4ddef1c77d931690f67f07846ac00b52b570e78894255040.exe
Resource
win10v2004-20220812-en
General
-
Target
d3a1d69728d6aa0b4ddef1c77d931690f67f07846ac00b52b570e78894255040
-
Size
768KB
-
MD5
2eee631fdc2b4df963f5710a36aa5946
-
SHA1
07b3b1438423686e3b65bcadc23e1683c96ec25a
-
SHA256
d3a1d69728d6aa0b4ddef1c77d931690f67f07846ac00b52b570e78894255040
-
SHA512
a933a87ebafa8c1860dc59c5ddd88b4662cb97b192c4055ec9813a085e17236a193472ad38d3de42a871baf1bc1f88db23da849ec1aec0190f702be929781417
-
SSDEEP
24576:IFr01VWXsDQl9GLJtr8WMfyfgTBaHhIc1A:IFZslYW0KgTe5
Malware Config
Signatures
Files
-
d3a1d69728d6aa0b4ddef1c77d931690f67f07846ac00b52b570e78894255040.exe windows x86
2d9393f84c12746a71aa8e6094ec03c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GlobalFree
Sleep
SetLastError
GetLocalTime
CreateSemaphoreA
CloseHandle
VirtualProtectEx
HeapSize
CreateHardLinkW
CreateMutexA
GetStartupInfoA
SetEvent
lstrlenA
GetFileAttributesA
GetProcessHeap
LoadLibraryA
CreateDirectoryW
ReadConsoleW
DeleteFileW
SetLastError
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcDeleteFilter
TcAddFlow
TcDeleteFlow
TcAddFilter
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE