Static task
static1
Behavioral task
behavioral1
Sample
d5b64254e4e9d214cd4e4d7a939122d3b5df4063e57191aa12ead1fcbf64a74f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d5b64254e4e9d214cd4e4d7a939122d3b5df4063e57191aa12ead1fcbf64a74f.exe
Resource
win10v2004-20221111-en
General
-
Target
d5b64254e4e9d214cd4e4d7a939122d3b5df4063e57191aa12ead1fcbf64a74f
-
Size
769KB
-
MD5
e9117515ee32b9b340f1bd0c2784e233
-
SHA1
3ba3828ad676d747cd885d59ac405dbed13a7f94
-
SHA256
d5b64254e4e9d214cd4e4d7a939122d3b5df4063e57191aa12ead1fcbf64a74f
-
SHA512
ca2e23e31c542a75bdad045b90df0b37dbd668a6d16b4ee6764df0417ad1ee8becd98ce41f7fb8ea70dbaa8e8afd97a4beb6185ad296d3813c18e2681ca59596
-
SSDEEP
24576:t9OTpjm2htiXOzuGXMPyc0ZWezsg8sRv:+TNm2hokJEj0Z9sJsR
Malware Config
Signatures
Files
-
d5b64254e4e9d214cd4e4d7a939122d3b5df4063e57191aa12ead1fcbf64a74f.exe windows x86
bea0134b777f5be02ced7ea7b428a32e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
CreateMutexA
OpenEventW
SetStdHandle
FindClose
GetModuleHandleA
CreateFileA
GetTickCount
CreateDirectoryW
ReleaseMutex
HeapFree
DeleteFileA
RemoveDirectoryA
RemoveDirectoryA
GetCommandLineA
WriteFile
WriteConsoleW
lstrlenA
ReleaseSemaphore
Beep
VirtualProtectEx
ResetEvent
FindClose
GetFileType
GetDriveTypeA
user32
DestroyMenu
DispatchMessageA
DrawTextW
IsWindow
FindWindowA
CreateIcon
GetWindowLongA
GetClassInfoA
GetSysColor
MessageBoxA
DestroyMenu
PeekMessageA
IsZoomed
dmutil
DisplayError
DisplayError
DisplayError
DisplayError
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ