?1l64189@@YGXKPAUHBRUSH__@FD0
Static task
static1
Behavioral task
behavioral1
Sample
d1dde67bcdf2d72e85ea09d5804ed153872c0b000d3ba285c52cbd3c3a29d674.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1dde67bcdf2d72e85ea09d5804ed153872c0b000d3ba285c52cbd3c3a29d674.exe
Resource
win10v2004-20221111-en
General
-
Target
d1dde67bcdf2d72e85ea09d5804ed153872c0b000d3ba285c52cbd3c3a29d674
-
Size
332KB
-
MD5
2282d745d18ce4be87f1fd10c1b92130
-
SHA1
493efefba1fae7940fe27b21bba8c8f0ed4a1469
-
SHA256
d1dde67bcdf2d72e85ea09d5804ed153872c0b000d3ba285c52cbd3c3a29d674
-
SHA512
26a22cd4c09b02bc0ab9c39e8339ed656f3cf82f4ac25d9b6297cf08923bafd0a80842812c8bee2d72574bc64e75f89aea992708c3ee1b921bbe2ffaf51f3d98
-
SSDEEP
6144:8c5EVlH/thJJeRkjRZ/A93lG6c/0c77mqN7wI21hHZVja1UHDsU:BuH/lIOjRZA9c77mqVO5mSDj
Malware Config
Signatures
Files
-
d1dde67bcdf2d72e85ea09d5804ed153872c0b000d3ba285c52cbd3c3a29d674.exe windows x86
2452771583c28610dba6e50c8bebf8b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsA
UrlCompareA
PathIsUNCA
PathIsSameRootW
kernel32
GetVersionExA
GetPrivateProfileStringW
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.core2 Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.core3 Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.core4 Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ