Static task
static1
Behavioral task
behavioral1
Sample
d3d588b64ed0dc83f1c901c4ca222b24de66084eeb50b23b725b7624870b2861.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d3d588b64ed0dc83f1c901c4ca222b24de66084eeb50b23b725b7624870b2861.exe
Resource
win10v2004-20220901-en
General
-
Target
d3d588b64ed0dc83f1c901c4ca222b24de66084eeb50b23b725b7624870b2861
-
Size
118KB
-
MD5
37a9c7e079a76926d7ea946d3896e6d0
-
SHA1
b4fe9e144dbef2eb4ee98feb529b828982a3cfe1
-
SHA256
d3d588b64ed0dc83f1c901c4ca222b24de66084eeb50b23b725b7624870b2861
-
SHA512
85d670cb3384046777ee36957a911ca91fc24a68114e5ae9aa6d59c80510e12e0871c8092b1652e49fbe6ad09f534e50ae241b83d031bb7c82dda88bb08a25d8
-
SSDEEP
3072:0kkgpE8UraVw3ewp8NItNSJ/Z+J91JEI4p:3ktD2pagItNYuLSI4
Malware Config
Signatures
Files
-
d3d588b64ed0dc83f1c901c4ca222b24de66084eeb50b23b725b7624870b2861.exe windows x86
65d3e51a60213ad47e331f4cc4a4bd6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateThread
RtlUnwind
GlobalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GlobalUnlock
IsProcessorFeaturePresent
WriteFile
CreateFileA
GlobalLock
GlobalAlloc
Sleep
GetTickCount
ExitProcess
IsDebuggerPresent
lstrcmpA
user32
MessageBoxExA
GetDC
GetClientRect
MessageBoxA
MessageBeep
ReleaseDC
GetSystemMetrics
gdi32
DeleteObject
GetObjectA
BitBlt
SelectObject
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
CreateCompatibleDC
GetDIBits
winmm
timeSetEvent
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ