Static task
static1
Behavioral task
behavioral1
Sample
d79ac352f110828f9f3455d3dcc49f21d587493f6ed008a83e39442e2a76abd3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d79ac352f110828f9f3455d3dcc49f21d587493f6ed008a83e39442e2a76abd3.exe
Resource
win10v2004-20220901-en
General
-
Target
d79ac352f110828f9f3455d3dcc49f21d587493f6ed008a83e39442e2a76abd3
-
Size
551KB
-
MD5
0a82ef29508a1318f773584ea99aeb00
-
SHA1
25ab2645d7cc10704e3183319fa6f44431785867
-
SHA256
d79ac352f110828f9f3455d3dcc49f21d587493f6ed008a83e39442e2a76abd3
-
SHA512
233cbc2271a18d6c3a747e55654e380a760a60c5648a15160381824cc27b082529221d5b16c45fda65c5b57c3d710c8d31379fd30e98b81ad1f382ecefe9943f
-
SSDEEP
3072:FSBzc8W1ToPjDbFPwYGghDJwhhVP/YNrFaba+7jnjXi:FE4xo/FPwYGSD6hhVP0psjLi
Malware Config
Signatures
Files
-
d79ac352f110828f9f3455d3dcc49f21d587493f6ed008a83e39442e2a76abd3.exe windows x86
0c1b17895074caa4bce30f8003fbe592
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
GetProcAddress
GetCommandLineA
GetVersionExA
GetModuleHandleA
GetStartupInfoA
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u8bjdu Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE