Static task
static1
Behavioral task
behavioral1
Sample
d990bc2f2812e5acc7917e9799803d71910399311c2515eff8b5e26307c61a17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d990bc2f2812e5acc7917e9799803d71910399311c2515eff8b5e26307c61a17.exe
Resource
win10v2004-20220812-en
General
-
Target
d990bc2f2812e5acc7917e9799803d71910399311c2515eff8b5e26307c61a17
-
Size
172KB
-
MD5
ebddaebebf39488e85b717b08e5d3a33
-
SHA1
f9224d024a94a970817a577a1a26654a9733b5f8
-
SHA256
d990bc2f2812e5acc7917e9799803d71910399311c2515eff8b5e26307c61a17
-
SHA512
e13130d42800ee60ac37cdcdbbb9fd05b562c56b7d748cf1bcfed877a74bcb1f46c97f8a239d616bc3126f7158b96b35bc592a970c484878e0ad778a1426c082
-
SSDEEP
3072:tYQeVNSVVVJIaBJ9AX+gEvZK/Oo5OvxEPzGn+BqQ+rQIn+WOMLN4c0:ReVUVj7BHY+gTOQOvxEWVQIQIhOR
Malware Config
Signatures
Files
-
d990bc2f2812e5acc7917e9799803d71910399311c2515eff8b5e26307c61a17.exe windows x86
b4e024bb102f2cf94f6e200ea99cdc80
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
IsBadReadPtr
GetCPInfo
GetDiskFreeSpaceA
CreateFileA
LCMapStringA
GetThreadLocale
FreeLibrary
WriteFile
ReadFile
FreeEnvironmentStringsA
IsBadCodePtr
GetFullPathNameA
EnumResourceNamesA
UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExW
SetFilePointer
SetStdHandle
LCMapStringW
SetUnhandledExceptionFilter
GetFileAttributesA
GetOEMCP
GetEnvironmentStringsW
GetStringTypeA
FreeEnvironmentStringsW
FlushFileBuffers
WideCharToMultiByte
GetEnvironmentStrings
VirtualProtect
MulDiv
shlwapi
DllGetVersion
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW
rpcrt4
RpcStringFreeA
Sections
.text Size: 88KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ