Static task
static1
Behavioral task
behavioral1
Sample
d4158df45b6c7a78b1cca6e70aaa903149e3e9648555cc9e8cce60e0b9f151e3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d4158df45b6c7a78b1cca6e70aaa903149e3e9648555cc9e8cce60e0b9f151e3.exe
Resource
win10v2004-20220901-en
General
-
Target
d4158df45b6c7a78b1cca6e70aaa903149e3e9648555cc9e8cce60e0b9f151e3
-
Size
129KB
-
MD5
adeece57dbd1150cde41e115f78a5c3e
-
SHA1
2d3a4b583b1e7a4a19f16a63554e4ccb246063d1
-
SHA256
d4158df45b6c7a78b1cca6e70aaa903149e3e9648555cc9e8cce60e0b9f151e3
-
SHA512
fa4ddefa7b02d4578c4b2b857767539b3774fe6bbdd3673a1b723ec7bd6f6f92fca9442339e59099f1212986a6e6d6fa8b0e037611b99b2b221e62fafc077de7
-
SSDEEP
1536:qHmbpCKduP0Ap2IrVo/i7s2JwbicSTu6wu0b5sD4csraLNciT:EmlCyoVoq7sQodKwx5sD4LraLNciT
Malware Config
Signatures
Files
-
d4158df45b6c7a78b1cca6e70aaa903149e3e9648555cc9e8cce60e0b9f151e3.exe windows x86
59b7bc7fb9deb89efe760be9e3755137
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetModuleHandleA
VirtualAlloc
LockResource
ResumeThread
CreateDirectoryA
GetLastError
SetComputerNameW
SuspendThread
CloseHandle
GetLocalTime
GetFileSize
GlobalAlloc
lstrcpyA
FreeResource
VirtualProtect
Sleep
CreateThread
SizeofResource
LoadResource
FindResourceExA
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
VirtualFree
GlobalFree
FindResourceA
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetStringTypeW
user32
SetSysColors
MessageBoxA
LoadIconA
GetDesktopWindow
IsWindowVisible
IsWindowEnabled
gdi32
GetObjectA
CreateBitmapIndirect
ole32
CoUninitialize
ws2_32
getservbyname
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ibss Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE