Static task
static1
Behavioral task
behavioral1
Sample
d4dbfcdcffcc8dd9af2968002528a1f84bf0e72f589d94f43b94c3043e6ade10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4dbfcdcffcc8dd9af2968002528a1f84bf0e72f589d94f43b94c3043e6ade10.exe
Resource
win10v2004-20220901-en
General
-
Target
d4dbfcdcffcc8dd9af2968002528a1f84bf0e72f589d94f43b94c3043e6ade10
-
Size
227KB
-
MD5
ab30c8c7e9951beb363a1c839bba8bb9
-
SHA1
939acc8a42f63c88fd6300b9ab6a9d3bea7c599e
-
SHA256
d4dbfcdcffcc8dd9af2968002528a1f84bf0e72f589d94f43b94c3043e6ade10
-
SHA512
93808d44630b7b9107ebfc881634c166a6314ff758da4fc587bfe99412e5e96860c942f2bed61a77dafc4245a18a2d6b7ec42e71c44b420c0d67d25cea13bdf0
-
SSDEEP
6144:C2Tvd7vBqzqIfvOSSiVH+ZjDgmzc9jcsvwAa29hFBJgn7Fy8F:C2TvnIXOSZH+pgmzsLvwAYE8F
Malware Config
Signatures
Files
-
d4dbfcdcffcc8dd9af2968002528a1f84bf0e72f589d94f43b94c3043e6ade10.exe windows x86
e084c69a58ff4d93ee64e49a6ff2c8aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
msvcrt
__p__fmode
_callnewh
malloc
_initterm
_CxxThrowException
_vsnwprintf
kernel32
SetLastError
TerminateProcess
GetStartupInfoA
WaitForSingleObject
MulDiv
GetCurrentProcess
GetConsoleOutputCP
GetModuleHandleA
GetVersionExA
GetACP
InterlockedDecrement
GetLocaleInfoW
LoadResource
HeapReAlloc
GetModuleFileNameA
SetEvent
SetStdHandle
Sleep
DisableThreadLibraryCalls
SetConsoleCP
InterlockedExchange
InterlockedIncrement
CloseHandle
HeapSize
VirtualProtect
HeapAlloc
GetProcessHeap
IsDebuggerPresent
DeleteCriticalSection
GetOEMCP
CompareFileTime
VirtualFree
GlobalUnlock
GetFileSize
GetVersion
LoadLibraryA
CreateProcessW
ExitProcess
CreateThread
GetCommandLineW
user32
SendMessageW
WindowFromPoint
SetCursor
LoadCursorA
GetWindowTextA
CharUpperW
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ