Static task
static1
Behavioral task
behavioral1
Sample
d706294b0567a73dfc5c84e4f6bf3f35a720a450a1f80db300311c189ecb2a96.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d706294b0567a73dfc5c84e4f6bf3f35a720a450a1f80db300311c189ecb2a96.exe
Resource
win10v2004-20220812-en
General
-
Target
d706294b0567a73dfc5c84e4f6bf3f35a720a450a1f80db300311c189ecb2a96
-
Size
155KB
-
MD5
1687dd57dc2b266afe7075695c129b94
-
SHA1
d3aebbde2109e238856f4e8d912fa8fb46d4abaf
-
SHA256
d706294b0567a73dfc5c84e4f6bf3f35a720a450a1f80db300311c189ecb2a96
-
SHA512
8f377b548b821a86603ae3b2e87ab4fb75d630a6d1f8a9e297c3e3dad22dce5f05c294b233a0c45eab2b62c26f1caa9b2c40494ebf02ea7faed90b7f3c6f738f
-
SSDEEP
3072:iRHt4l+oDxVfrz/uj2Ezp2FS5we0PSvw68poMaeYYkJ6:iRN4z3uCCwQ5Yyh8YL6
Malware Config
Signatures
Files
-
d706294b0567a73dfc5c84e4f6bf3f35a720a450a1f80db300311c189ecb2a96.exe windows x86
491ff222a214594019a10ea00f7b6d71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
CompareFileTime
HeapCreate
VirtualProtect
GetCommandLineA
GetVersion
GetModuleHandleA
GetAtomNameA
LoadLibraryExA
WaitForSingleObject
GlobalUnlock
GetSystemDefaultLangID
HeapReAlloc
LocalSize
CloseHandle
lstrlenA
GetConsoleCP
GetTickCount
WaitForMultipleObjects
SuspendThread
InterlockedExchange
gdi32
Escape
GetStringBitmapA
CreatePalette
GetMetaRgn
GdiFlush
Ellipse
EndPath
EngLineTo
EqualRgn
GetFontData
GetMetaFileA
DeleteObject
GetTextColor
BeginPath
GetRgnBox
CreateFontA
DeleteDC
FloodFill
CreateICA
AbortPath
winmm
PlaySoundA
auxSetVolume
auxGetVolume
OpenDriver
CloseDriver
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ