Static task
static1
Behavioral task
behavioral1
Sample
d058b8f88e09ee6c833b9bac6b64e1569416e8bab2c150094f449e6aa65e318f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d058b8f88e09ee6c833b9bac6b64e1569416e8bab2c150094f449e6aa65e318f.exe
Resource
win10v2004-20221111-en
General
-
Target
d058b8f88e09ee6c833b9bac6b64e1569416e8bab2c150094f449e6aa65e318f
-
Size
367KB
-
MD5
4fa3e605f96beffc824b327a9352634a
-
SHA1
c84ec7de2fe50fda65c0ab8647e901a5c307eec0
-
SHA256
d058b8f88e09ee6c833b9bac6b64e1569416e8bab2c150094f449e6aa65e318f
-
SHA512
948a1edb6d56da5a85d06909efe6b589dd023499422945b1eefe216bdfe6bd342c1f6be30bf724becf38b10d8a2bc08e4c02926795bfb25ca184456969334437
-
SSDEEP
6144:2QKP1RMra4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:ORMOx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
Files
-
d058b8f88e09ee6c833b9bac6b64e1569416e8bab2c150094f449e6aa65e318f.exe windows x86
dd07e694c79af9309c87f2d4998e29f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetConsoleAliasW
LocalFree
SetLastError
GetCurrentProcessId
EnumCalendarInfoW
GetFileAttributesA
HeapCreate
ReadFile
lstrlenA
CreateMailslotA
GetCurrentThreadId
EnterCriticalSection
GetModuleFileNameA
FindAtomW
GetPrivateProfileStringW
SetEvent
ResumeThread
FindClose
GetDriveTypeW
user32
GetClassInfoA
CallWindowProcW
SetFocus
GetSysColor
GetCursorInfo
DrawTextW
DispatchMessageA
IsWindow
GetMenuInfo
GetClientRect
GetKeyState
GetKeyboardType
DispatchMessageA
admparse
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ