Static task
static1
Behavioral task
behavioral1
Sample
d18bcbe1981f64a5fbb034d65e6b9fa3c409596b155567786694975eca68d48d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d18bcbe1981f64a5fbb034d65e6b9fa3c409596b155567786694975eca68d48d.exe
Resource
win10v2004-20221111-en
General
-
Target
d18bcbe1981f64a5fbb034d65e6b9fa3c409596b155567786694975eca68d48d
-
Size
337KB
-
MD5
a8060f957aa1ccd718f38549734d5895
-
SHA1
03d0407f18cd96c05bde36b321ddcf9ac8ce8a53
-
SHA256
d18bcbe1981f64a5fbb034d65e6b9fa3c409596b155567786694975eca68d48d
-
SHA512
1cdf7f7f94334d91c33bdd30112673b18753d724b049911370301fc51decfbaa254ca77a9733d7dacb759c0624da5b8fdb680e27e8b89dbbaa3cb1f637871309
-
SSDEEP
6144:ca7Fhjrxd4lakFcJtX7HW5XH7Xv6Ak2GBJR1ND1iS6uq3kPdyumdBFN:cqFhj1CrFc3X7HoHj2D/z6fUA/
Malware Config
Signatures
Files
-
d18bcbe1981f64a5fbb034d65e6b9fa3c409596b155567786694975eca68d48d.exe windows x86
fcd37229ae4990b744ebf29d652862fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
SetLastError
LoadLibraryA
SetEvent
GetCommandLineA
GetFileAttributesA
ReleaseMutex
FindAtomA
GetDriveTypeW
GetComputerNameA
LocalFree
LoadLibraryW
CreateThread
HeapCreate
GetDiskFreeSpaceW
CloseHandle
ReleaseMutex
CreateFileA
lstrcatA
GetTickCount
user32
GetClassInfoA
GetDlgItem
GetClipCursor
FillRect
DispatchMessageA
CallWindowProcA
GetComboBoxInfo
DestroyCaret
SetFocus
GetKeyState
CreateWindowExA
CloseWindow
DrawStateA
cryptnet
CryptCancelAsyncRetrieval
CryptUninstallCancelRetrieval
CertDllVerifyCTLUsage
CryptGetTimeValidObject
CryptGetObjectUrl
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ