Static task
static1
Behavioral task
behavioral1
Sample
d11f89a5ec5668e75bb9b22c506b1d4236467fd941de33aeb9ff6efce7143016.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d11f89a5ec5668e75bb9b22c506b1d4236467fd941de33aeb9ff6efce7143016.exe
Resource
win10v2004-20220901-en
General
-
Target
d11f89a5ec5668e75bb9b22c506b1d4236467fd941de33aeb9ff6efce7143016
-
Size
92KB
-
MD5
509ff125be64db3b64f69029c703a96f
-
SHA1
c83d9a7d8bd57815ceafcb21affef4bccdcf2d99
-
SHA256
d11f89a5ec5668e75bb9b22c506b1d4236467fd941de33aeb9ff6efce7143016
-
SHA512
d6dc1b1c291389d2ee87d412f8d6a49a15125a7ba01e0a0d31f565c076172c65e18f4a0d94fb732b62695cca888dc8dc63a64ffe9d93dd19edb205b3d6a4cbbd
-
SSDEEP
1536:OYE6X9D8sMMOPAoKu/avRefffffIxqQ0nu8S:Oti90pPAoK60RpxqQ0n
Malware Config
Signatures
Files
-
d11f89a5ec5668e75bb9b22c506b1d4236467fd941de33aeb9ff6efce7143016.exe windows x86
fa85327a2e2f953933f22880e30fa898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
FindResourceW
GetCurrentThreadId
CloseHandle
HeapCreate
PulseEvent
lstrlenA
Sleep
FindClose
GetCommandLineA
lstrcpyA
UnmapViewOfFile
GetModuleHandleA
LocalFree
SetLastError
GetComputerNameA
GetCurrentDirectoryA
CreateProcessA
GlobalUnlock
CreateFileW
user32
IsWindow
DrawMenuBar
DispatchMessageA
CheckRadioButton
CreateIcon
GetDC
DrawEdge
GetCaretPos
SetFocus
GetDlgItem
FillRect
CallWindowProcA
CreateWindowExA
rsaenh
CPGenKey
CPHashData
CPDecrypt
CPDeriveKey
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cweshyy Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE