Static task
static1
Behavioral task
behavioral1
Sample
d8697d5e8b9a529f42f04f55b7bc0e38a5b0588507c958ce8290070d5c6db81d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8697d5e8b9a529f42f04f55b7bc0e38a5b0588507c958ce8290070d5c6db81d.exe
Resource
win10v2004-20220812-en
General
-
Target
d8697d5e8b9a529f42f04f55b7bc0e38a5b0588507c958ce8290070d5c6db81d
-
Size
61KB
-
MD5
5ae4e1c4c2a278109bb1fe1418e474e7
-
SHA1
a37680bfa0cd78816287b965b575c5a92b4bf770
-
SHA256
d8697d5e8b9a529f42f04f55b7bc0e38a5b0588507c958ce8290070d5c6db81d
-
SHA512
3dcf29f30f21b41a24a2f70423790997f3c6d22e312c3346c7256ef08db52aa8e4913dbaeb47d09aeb653d3c91413295e2adf954745b0801b512804665e0c432
-
SSDEEP
768:iJHVRldnTzJ1ARqBRBEMG9H8f2btmraXjKjfGdbIryJRzHsnNISoi657KnnDrx:GHVLdTHAuRBomfGWjEThMnR56tKDrx
Malware Config
Signatures
Files
-
d8697d5e8b9a529f42f04f55b7bc0e38a5b0588507c958ce8290070d5c6db81d.exe windows x86
bd81d5b7dbd4d2433b7ec28f9694d1d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateCompatibleDC
LineTo
LineTo
GetObjectW
DeleteDC
CreateCompatibleDC
BitBlt
GetTextMetricsW
LineTo
PatBlt
GetTextMetricsW
ExtTextOutW
LineTo
GetObjectW
TextOutW
DeleteDC
MoveToEx
SetTextColor
ExtTextOutW
MoveToEx
SelectObject
CreateCompatibleBitmap
SetTextColor
SetBkMode
MoveToEx
DeleteDC
SetTextColor
shell32
SHGetFileInfoW
SHGetPathFromIDListW
DragQueryFileW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathW
Shell_NotifyIconW
advapi32
RegOpenKeyExW
user32
GetWindowRect
GetSystemMetrics
DestroyWindow
LoadStringW
SetTimer
SetCursor
DestroyWindow
SetTimer
ReleaseDC
GetSystemMetrics
ShowWindow
GetWindowRect
PostMessageW
ShowWindow
GetDC
PostMessageW
GetMessageW
GetDC
LoadIconW
LoadStringW
GetWindowRect
kernel32
WaitForSingleObject
GetModuleHandleA
GetModuleFileNameA
ExitProcess
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentThreadId
LocalFree
MultiByteToWideChar
GetCurrentThreadId
MultiByteToWideChar
MultiByteToWideChar
FreeLibrary
MultiByteToWideChar
GetProcessHeap
LocalFree
SetEvent
GetCommandLineW
GetModuleHandleW
LocalAlloc
GetCommandLineW
lstrcmpiW
GetCurrentProcessId
GetCommandLineW
lstrlenW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 36KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ