Static task
static1
Behavioral task
behavioral1
Sample
d0ce7d4b0b241c3032383032b3855ba4db51bf9a05bfb1a315344f4bdfad0b38.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d0ce7d4b0b241c3032383032b3855ba4db51bf9a05bfb1a315344f4bdfad0b38.exe
Resource
win10v2004-20221111-en
General
-
Target
d0ce7d4b0b241c3032383032b3855ba4db51bf9a05bfb1a315344f4bdfad0b38
-
Size
317KB
-
MD5
c08d62acb07fc8ab592ce47e76e0a0e1
-
SHA1
bb6eb0b435e912aaf5774824e0bda7db9d3997f4
-
SHA256
d0ce7d4b0b241c3032383032b3855ba4db51bf9a05bfb1a315344f4bdfad0b38
-
SHA512
c3227cecd3106f6ee101e1b8d57350761560dcc7768f1108157d735165c14f854b2937107b5165500a213b8516ffe879f08c2eeb1a7190eca6cfbae231ec3072
-
SSDEEP
6144:OiwuVRVeUlle8GBWuABrs78RvNmX3yQ4T47oc5DNfqWmczvoJ/YyZ:yoRVpf9oWuWrcBX3yp0oc5Ds1cz7W
Malware Config
Signatures
Files
-
d0ce7d4b0b241c3032383032b3855ba4db51bf9a05bfb1a315344f4bdfad0b38.exe windows x86
8666e9b1b6b2d23ce773a8bf7f2964ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
GetLocalTime
GetModuleHandleW
FindAtomW
FindClose
GetComputerNameA
GetStdHandle
MapViewOfFile
GlobalFree
ExitProcess
GetFileAttributesW
CreateFileA
GetLastError
CloseHandle
GetPrivateProfileIntA
GetTickCount
lstrlenA
TlsGetValue
SetLastError
VirtualAlloc
user32
GetClassInfoA
DestroyCaret
CloseWindow
DrawStateA
EndDialog
GetCaretPos
DispatchMessageA
GetMenu
GetDlgItem
FillRect
GetClientRect
CallWindowProcA
CreateWindowExA
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
d3dim
D3DFree
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ