Static task
static1
Behavioral task
behavioral1
Sample
d1ec2716fbe3e7bc329deef2ac82e2a2752831d22d4e9bd28122289c9765c220.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1ec2716fbe3e7bc329deef2ac82e2a2752831d22d4e9bd28122289c9765c220.exe
Resource
win10v2004-20220812-en
General
-
Target
d1ec2716fbe3e7bc329deef2ac82e2a2752831d22d4e9bd28122289c9765c220
-
Size
448KB
-
MD5
55a7d2ae168c1f5d68ae9f96a27713a7
-
SHA1
c48ff8fd8f5a7a2de9692e988c439fc295aa01c5
-
SHA256
d1ec2716fbe3e7bc329deef2ac82e2a2752831d22d4e9bd28122289c9765c220
-
SHA512
f0ad677344c5ce2f8921629083c8f9fb0d366135c5c9b4087972e91bb7683c7e84be7a59fc330ee7ccc469201ebb85458941d03138d6d4b6e126e29bcf01c7bf
-
SSDEEP
6144:WSW/4jCcAcbplZhFo7hOraRGJxiofyl9QBfr0ZsN62YzbyAijf1364Db3VW6ISk2:mUBbpnHoWa0JxoQ5r0ZL22liLZiqzZ
Malware Config
Signatures
Files
-
d1ec2716fbe3e7bc329deef2ac82e2a2752831d22d4e9bd28122289c9765c220.exe windows x86
723a3e32fd112729df03dcbee3d37c55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetEvent
FindVolumeClose
GetFileAttributesA
OpenThread
WriteConsoleA
SuspendThread
HeapDestroy
HeapCreate
ExitProcess
DeleteFileA
CloseHandle
CloseHandle
ReleaseMutex
OpenEventW
GetCommandLineW
GetEnvironmentVariableW
FindResourceExW
GetTickCount
GetStartupInfoA
user32
GetCaretPos
GetIconInfo
PeekMessageA
DispatchMessageA
GetKeyState
IsZoomed
CallWindowProcW
SetFocus
DispatchMessageA
GetClassInfoA
GetWindowLongA
FindWindowA
GetSysColor
htui
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 442KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ