Static task
static1
Behavioral task
behavioral1
Sample
d2cb7557ef322e0caa5bce9fd1b4871a053fd323e4c3b580b6f257882e5696ce.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d2cb7557ef322e0caa5bce9fd1b4871a053fd323e4c3b580b6f257882e5696ce.exe
Resource
win10v2004-20221111-en
General
-
Target
d2cb7557ef322e0caa5bce9fd1b4871a053fd323e4c3b580b6f257882e5696ce
-
Size
1.9MB
-
MD5
12856888a35d2b3f7ab644c53dcefd2f
-
SHA1
e2847103074b6caf02579024e5c5e864413ffac5
-
SHA256
d2cb7557ef322e0caa5bce9fd1b4871a053fd323e4c3b580b6f257882e5696ce
-
SHA512
6301d9dd704476f1bbcf9c44e72e15debc15f337fde8c059efad0ff7d9a17da867431f2ac53d028f241e9457b9d5cce1d706a93447cf299cb3eac0b7c9bee864
-
SSDEEP
24576:edYZNqTZnfbUzfpJzG7837CyFa0hTBhVPcIjPVy4hxlmtf3vMSlSmfw5DxpDjkpg:e6NqFz2p100hvVPZLVsESlSl5lHdAx0
Malware Config
Signatures
Files
-
d2cb7557ef322e0caa5bce9fd1b4871a053fd323e4c3b580b6f257882e5696ce.exe windows x86
e0684852489dc700f85b3dbf934928e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetSetStatusCallbackW
user32
DrawFrameControl
gdi32
GetRgnBox
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
ChangeServiceConfigW
shell32
SHGetDesktopFolder
comctl32
_TrackMouseEvent
shlwapi
PathFileExistsW
ole32
DoDragDrop
oleaut32
VarBstrFromDate
setupapi
CM_Get_Parent
winmm
timeEndPeriod
version
GetFileVersionInfoW
dbghelp
MiniDumpWriteDump
netapi32
NetWkstaGetInfo
wintrust
CryptCATAdminAcquireContext
crypt32
CertFindCertificateInStore
oleacc
AccessibleObjectFromWindow
imm32
ImmGetOpenStatus
Sections
.text Size: 1.9MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE