Static task
static1
Behavioral task
behavioral1
Sample
d52948f56cbdb87fbe8d6a8cf9b1001e77cba44629eadf8dc371bd7188dbd012.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d52948f56cbdb87fbe8d6a8cf9b1001e77cba44629eadf8dc371bd7188dbd012.exe
Resource
win10v2004-20220812-en
General
-
Target
d52948f56cbdb87fbe8d6a8cf9b1001e77cba44629eadf8dc371bd7188dbd012
-
Size
769KB
-
MD5
1a7502d687ea85cd27b4b511ed7dae00
-
SHA1
bee48096041bb183b475a3983a82780e5ed3cf7e
-
SHA256
d52948f56cbdb87fbe8d6a8cf9b1001e77cba44629eadf8dc371bd7188dbd012
-
SHA512
476760f35597272b41e1b56afd5f31bfdd527105522246d4dfd1ae39dc909c92ce520b80d05d4e822a0f22ad39a6e5fad069e70f75736b545500e414494c75ea
-
SSDEEP
12288:xDHxn8p6gidjDNuIZuxGmieEnL1z70QsaLWGqrTMfQHm9vgMtVpdvcJQw7V0xCvD:xD5u6XY4Z70QsaioQH0vgMWtpIUD
Malware Config
Signatures
Files
-
d52948f56cbdb87fbe8d6a8cf9b1001e77cba44629eadf8dc371bd7188dbd012.exe windows x86
f70ad485c51ef6ac2cc39f6942598af7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WriteConsoleW
VirtualProtectEx
HeapFree
GetVersion
OpenEventW
FindClose
ReleaseSemaphore
GetDriveTypeA
ReleaseMutex
RemoveDirectoryW
RemoveDirectoryW
CreateDirectoryW
CreateFileA
lstrlenA
CreateMutexA
DeleteFileA
GetFileSize
CreateFileMappingW
SetStdHandle
Sleep
FindClose
GetModuleHandleA
ResetEvent
WriteFile
user32
FindWindowA
IsZoomed
MessageBoxA
CreateIcon
GetClassInfoA
GetWindowLongA
PeekMessageA
DestroyMenu
IsWindow
DrawTextW
GetSysColor
DestroyMenu
DispatchMessageA
efsadu
EfsDetail
EfsDetail
EfsDetail
EfsDetail
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ