Static task
static1
Behavioral task
behavioral1
Sample
d9588f311e90e9e1338ef5505b8515b25f768f9e8034943121642e9638956e95.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9588f311e90e9e1338ef5505b8515b25f768f9e8034943121642e9638956e95.exe
Resource
win10v2004-20221111-en
General
-
Target
d9588f311e90e9e1338ef5505b8515b25f768f9e8034943121642e9638956e95
-
Size
112KB
-
MD5
8300ea57d0f38566c601b0b3e9b8ae9e
-
SHA1
5d969199403db9c7d8ce5de90378483474e5e534
-
SHA256
d9588f311e90e9e1338ef5505b8515b25f768f9e8034943121642e9638956e95
-
SHA512
a76a384eb2b12c09af6f30432020cc388b09fd23bb4824a798ad31dbf5d5af8b7a8116bef8c7f87b600cd607dbd93ec6f015a9a469686a919941280d90f55515
-
SSDEEP
1536:zqm51coXbI+ZluF+AGXhVIBL7STXDYZ/NdDFRDuhdyUkdgtr9d/WCMfxe:znTXbdHNXkBfxR3DFVuryUVvWLf
Malware Config
Signatures
Files
-
d9588f311e90e9e1338ef5505b8515b25f768f9e8034943121642e9638956e95.exe windows x86
da4c6358ba692b77a531650d4d5e0cce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
TranslateMessage
GetSystemMetrics
GetDesktopWindow
CharNextA
kernel32
GetCurrentThreadId
GetTickCount
GetOEMCP
DeleteFileW
GlobalFindAtomA
GlobalFindAtomW
IsDebuggerPresent
GetUserDefaultLangID
CopyFileA
RemoveDirectoryW
GetACP
GetDriveTypeA
GetCurrentProcess
GetCurrentProcessId
lstrcmpiW
GetVersion
GetWindowsDirectoryA
GetStartupInfoA
RemoveDirectoryA
GetThreadLocale
lstrcmpiA
DeleteFileA
QueryPerformanceCounter
SetCurrentDirectoryA
lstrcmpA
VirtualAlloc
GetCurrentThread
GetModuleHandleA
GetConsoleOutputCP
GetCommandLineW
VirtualFree
MulDiv
lstrlenW
GetCommandLineA
lstrlenA
GetProcessHeap
GetModuleHandleW
gdi32
DeleteDC
SelectPalette
SetTextAlign
CreateSolidBrush
RectVisible
CreatePalette
SetTextColor
SetMapMode
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
LineTo
SetPixel
CreatePen
RestoreDC
GetClipBox
SetStretchBltMode
GetObjectA
GetDeviceCaps
SaveDC
GetTextMetricsA
GetPixel
SelectObject
GetStockObject
PatBlt
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE