Static task
static1
Behavioral task
behavioral1
Sample
d24d0e4a36473e241b339b3044032ce7cbc32bfad3f00d14adc6152c54749fc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d24d0e4a36473e241b339b3044032ce7cbc32bfad3f00d14adc6152c54749fc7.exe
Resource
win10v2004-20220812-en
General
-
Target
d24d0e4a36473e241b339b3044032ce7cbc32bfad3f00d14adc6152c54749fc7
-
Size
129KB
-
MD5
72cb9d844d5a63c6308523a2292af1d4
-
SHA1
2ccc6c9fa41bbcc90f64f3db8a86ad691ade3ba4
-
SHA256
d24d0e4a36473e241b339b3044032ce7cbc32bfad3f00d14adc6152c54749fc7
-
SHA512
fba53f065ef534bda9371877ee6867e96e3c1d08096e013a42dd9b791e290526eb3847e4daf7eb0272e5a3cd73609d4b3d22ae30974b0b85b651dd79d885085a
-
SSDEEP
3072:blapU4eayFKbdJGdF1B7VW4YF+Vp9aKz6R9CFO2P4RMOUJYJ8QWrwZP8:8S4evKgdF37g4v9K9CWMxuU
Malware Config
Signatures
Files
-
d24d0e4a36473e241b339b3044032ce7cbc32bfad3f00d14adc6152c54749fc7.exe windows x86
0b0dc150739e008e66c8394b160c3450
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
QueryPerformanceCounter
LocalAlloc
GetTickCount
GetACP
GetModuleHandleA
VirtualFree
LocalAlloc
GetCommandLineW
GetACP
GetCommandLineA
LocalAlloc
SetUnhandledExceptionFilter
GetModuleHandleA
MultiByteToWideChar
GetCurrentProcess
FindResourceA
GetProcessHeap
GetCommandLineW
GetModuleHandleW
MultiByteToWideChar
GetModuleHandleW
LocalFree
SetUnhandledExceptionFilter
MultiByteToWideChar
SetUnhandledExceptionFilter
GetCommandLineW
GetCurrentProcess
GetACP
GetModuleHandleW
GetCurrentProcessId
GetCurrentProcessId
user32
KillTimer
CheckDlgButton
EnableMenuItem
SendDlgItemMessageW
GetSystemMetrics
MoveWindow
EnableMenuItem
GetCursorPos
GetCursorPos
GetDlgCtrlID
LoadAcceleratorsW
LoadAcceleratorsW
GetDlgCtrlID
PostMessageW
EndPaint
GetSystemMetrics
BeginPaint
GetDlgCtrlID
DialogBoxParamW
EndPaint
MoveWindow
GetSystemMetrics
MoveWindow
LoadImageW
GetCursorPos
GetSystemMetrics
DialogBoxParamW
GetSystemMenu
LoadAcceleratorsW
CheckDlgButton
ntdll
NtAllocateVirtualMemory
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ