Static task
static1
Behavioral task
behavioral1
Sample
d9bdd2b4e5465254022567347a8743d46e7d1fbbc5c8ce296dc96e2ecdd02f7f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9bdd2b4e5465254022567347a8743d46e7d1fbbc5c8ce296dc96e2ecdd02f7f.exe
Resource
win10v2004-20221111-en
General
-
Target
d9bdd2b4e5465254022567347a8743d46e7d1fbbc5c8ce296dc96e2ecdd02f7f
-
Size
312KB
-
MD5
c50e10f7f95a2d4c2c4b94f525022ebf
-
SHA1
1e43e4344e8cbf89d5c0fde040cfbf1eb6e12427
-
SHA256
d9bdd2b4e5465254022567347a8743d46e7d1fbbc5c8ce296dc96e2ecdd02f7f
-
SHA512
5a1b6f0ea0035c14f9f50739e1e0ee8bffef45d2f93759edc4c48f053d5b661a0a3cf3d5cddcd379028f4001baf22669a133e2411fc0704aa4742fdf0f0238e5
-
SSDEEP
6144:RrTuETVyp+zFTan/bdV+6A5iP2naGmzvXYu5aRCaMMQG:RWr+zUDvA5eYYvYiaPMY
Malware Config
Signatures
Files
-
d9bdd2b4e5465254022567347a8743d46e7d1fbbc5c8ce296dc96e2ecdd02f7f.exe windows x86
baa5d932a114b6517bd043645d2ea37b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
FlushFileBuffers
ReadConsoleA
LoadLibraryExA
IsDebuggerPresent
GetSystemDirectoryA
RaiseException
OpenMutexA
GetCurrentThread
GetCompressedFileSizeA
GetACP
GetStdHandle
SetEvent
GetCurrentProcess
FreeEnvironmentStringsA
HeapCreate
GetCurrentProcessId
GetLocaleInfoA
GetCommandLineA
GlobalFree
VirtualProtect
user32
ValidateRgn
ShowWindow
GetClassNameA
GetDlgItem
IsIconic
EndPaint
wsprintfA
BeginPaint
DrawTextA
FrameRect
FillRect
GetWindowTextA
GetWindow
GetFocus
ReleaseDC
GetParent
SetActiveWindow
SetForegroundWindow
GetCursorPos
crypt32
CertFindAttribute
CertDuplicateStore
CertCreateContext
CertCloseStore
CertControlStore
apphelp
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ