Static task
static1
Behavioral task
behavioral1
Sample
d17fade1d05d4db40ec1770b2934aa75139ca02c9c4b05aa256137e8d573b758.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d17fade1d05d4db40ec1770b2934aa75139ca02c9c4b05aa256137e8d573b758.exe
Resource
win10v2004-20221111-en
General
-
Target
d17fade1d05d4db40ec1770b2934aa75139ca02c9c4b05aa256137e8d573b758
-
Size
99KB
-
MD5
f45cfae3607016cdb1314867b8d65980
-
SHA1
daf1021a4492aad669219e6c0c9ff324435f4d40
-
SHA256
d17fade1d05d4db40ec1770b2934aa75139ca02c9c4b05aa256137e8d573b758
-
SHA512
fc09c2188b2932ccddb24220624648c9ff980c8dd46c704610a1cee29bc1d096a655a2e6586d24435db72e830fe9e85b4f2bc8b5374a04019abf30e2a52bcb64
-
SSDEEP
1536:ohLaziqi5l5DThsCB7Bv2WwDe4aTq3isQT8jNzl7xMppniqipTM9q:ohLtP5l5DlvB7Bv0a05l7xM/nr9q
Malware Config
Signatures
Files
-
d17fade1d05d4db40ec1770b2934aa75139ca02c9c4b05aa256137e8d573b758.exe windows x86
9d412cc7326d0752bfaad98c5afcd6a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
CreateFileA
CreateSemaphoreA
VirtualProtect
GetCurrentProcess
VirtualAlloc
VirtualFree
LocalFree
LockResource
LocalAlloc
LoadResource
FindResourceA
VirtualAllocEx
CreateEventA
SetEvent
ExitProcess
GetModuleHandleA
Sleep
DeleteFileA
WaitForSingleObject
user32
SendMessageA
FindWindowA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ