Static task
static1
Behavioral task
behavioral1
Sample
d918111d565f47be97dc764245fd8654c297be8d195414a205e4412a3c6007c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d918111d565f47be97dc764245fd8654c297be8d195414a205e4412a3c6007c2.exe
Resource
win10v2004-20221111-en
General
-
Target
d918111d565f47be97dc764245fd8654c297be8d195414a205e4412a3c6007c2
-
Size
257KB
-
MD5
9e39dc1d7a1dbe0c9046bf94af58c2fb
-
SHA1
ac7e5da3ec43155398a5d865800ce8a385813c1e
-
SHA256
d918111d565f47be97dc764245fd8654c297be8d195414a205e4412a3c6007c2
-
SHA512
88ae013db4fd3777da3913e83be97a906eb8107119d1af6705de68a67a8fb67f91da671cf127002cb6bbbc2607b02ae373d19f7b719a815dccfe8d8cacec0bfa
-
SSDEEP
6144:Vhz/SadE+mqYKF5kVyjfJGarhsAseIn7nMPVHDzu:jz/Sau+mZKAUxGa817nMPJzu
Malware Config
Signatures
Files
-
d918111d565f47be97dc764245fd8654c297be8d195414a205e4412a3c6007c2.exe windows x86
a6ddb2a2f8b48b75451a344915d56e11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
dciman32
DCIBeginAccess
kernel32
GetModuleHandleA
GlobalFree
GetProcessHeap
GetShortPathNameW
CopyFileA
GlobalUnlock
GetModuleFileNameA
GetStdHandle
FreeLibrary
GetShortPathNameA
GlobalAlloc
LocalFree
GlobalLock
RemoveDirectoryA
ExitProcess
GetLastError
RemoveDirectoryW
GetModuleFileNameW
GetModuleHandleW
FormatMessageA
CompareStringW
lstrcpynA
CopyFileW
GetModuleFileNameW
CloseHandle
ExitProcess
DeleteFileW
SetFileAttributesA
DeleteFileA
SetFileAttributesW
LoadLibraryA
user32
IsIconic
GetLastActivePopup
SetRect
ShowWindow
GetWindowRect
SetForegroundWindow
EnumWindowStationsW
GetClientRect
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bore Size: 5KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ