Static task
static1
Behavioral task
behavioral1
Sample
d1b660288863648450b4e1bf3af3dd5b031be8c66ce26f96b9f91fb370a32ccf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1b660288863648450b4e1bf3af3dd5b031be8c66ce26f96b9f91fb370a32ccf.exe
Resource
win10v2004-20220812-en
General
-
Target
d1b660288863648450b4e1bf3af3dd5b031be8c66ce26f96b9f91fb370a32ccf
-
Size
628KB
-
MD5
e5e9ef334142fb169e38d62eae9b6370
-
SHA1
079cb98ef9cd87de0905ab6f40184bbe4103b317
-
SHA256
d1b660288863648450b4e1bf3af3dd5b031be8c66ce26f96b9f91fb370a32ccf
-
SHA512
f40e2a7e8370ba1f2524f6c770ded580430ee04e0cb70fa16e05175cc9c4e9155538a63c27fe4d9717f8ea53f40ebdd9373e906f196cdffbc4a6a09b96dba9c0
-
SSDEEP
12288:n7/VJnRM/QkEtJTuOnu1s0uFiW/YFugmOeRUhxhsk/bxSx:n7/VlRM/QkcTuOu1higF6OeRUXh5/M
Malware Config
Signatures
Files
-
d1b660288863648450b4e1bf3af3dd5b031be8c66ce26f96b9f91fb370a32ccf.exe windows x86
32d4cc91e1a5edf104e3a85025220ef4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
GetWindow
GetDC
GetWindowLongA
IsWindowVisible
ScreenToClient
InvalidateRect
GetDesktopWindow
kernel32
SetEvent
InitializeCriticalSection
HeapFree
GetStdHandle
ReadFile
LoadResource
FreeLibrary
QueryPerformanceCounter
HeapDestroy
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCommandLineA
GetCurrentProcessId
GetVersion
GetTickCount
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
LeaveCriticalSection
SetLastError
TlsSetValue
FormatMessageA
Sleep
IsDebuggerPresent
CreateFileW
FindResourceW
UnmapViewOfFile
GetEnvironmentVariableA
GetTimeZoneInformation
TerminateProcess
GetModuleHandleW
HeapReAlloc
GetACP
FindNextFileW
LoadLibraryExW
FindFirstFileA
SetFilePointer
GetCPInfo
CompareStringA
RaiseException
CloseHandle
HeapSize
WideCharToMultiByte
DeleteFileA
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
GetCurrentProcess
CompareStringW
lstrlenW
GetModuleFileNameA
GetVersionExA
GetOEMCP
Sections
.text Size: 586KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ