Static task
static1
Behavioral task
behavioral1
Sample
d5507b56956824043e49d55d7a7be23f880a5103d3e2dcedfa534fb458030b8e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d5507b56956824043e49d55d7a7be23f880a5103d3e2dcedfa534fb458030b8e.exe
Resource
win10v2004-20221111-en
General
-
Target
d5507b56956824043e49d55d7a7be23f880a5103d3e2dcedfa534fb458030b8e
-
Size
12KB
-
MD5
ce2b1d33c5e8f916f018d9864bd2acff
-
SHA1
919ea6d84c2cc101e6fa758c82b7b140abd26525
-
SHA256
d5507b56956824043e49d55d7a7be23f880a5103d3e2dcedfa534fb458030b8e
-
SHA512
d05101c64ff98480c2177ae8bfef2e038860085b5b8c3884ecc8d0c6dfa45166c9693f6f9a99b0eb82c9150b32a591fa5c66f81338ef2c40003594e70935d2a2
-
SSDEEP
192:+LsMGolt57ZxlbC73li7zG6UInwgfnYHrABK6rDbgoxnhkhrb5NeF:VMHn7SlezG6UIwgfnYMBKqDMQhkhrn
Malware Config
Signatures
Files
-
d5507b56956824043e49d55d7a7be23f880a5103d3e2dcedfa534fb458030b8e.exe windows x86
0fe1c3faf17cfbdb7c9ef5e7b2ecae2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
kernel32
lstrlenA
GlobalAlloc
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCurrentProcess
GetFileSize
GetModuleFileNameA
GlobalFree
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GetProcAddress
user32
ExitWindowsEx
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
advapi32
RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
OpenProcessToken
shlwapi
StrStrIA
wsock32
WSAStartup
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE