Static task
static1
Behavioral task
behavioral1
Sample
d67e8389b4c3260f56fcc62ce51c4886288debcfeafc748e4a7e961b60129d8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d67e8389b4c3260f56fcc62ce51c4886288debcfeafc748e4a7e961b60129d8d.exe
Resource
win10v2004-20220812-en
General
-
Target
d67e8389b4c3260f56fcc62ce51c4886288debcfeafc748e4a7e961b60129d8d
-
Size
408KB
-
MD5
351fc5e540852592bc03fcf27cb44207
-
SHA1
ef0b719466f60ce352d6aadfa7c31baf53841c4b
-
SHA256
d67e8389b4c3260f56fcc62ce51c4886288debcfeafc748e4a7e961b60129d8d
-
SHA512
f368e1e0f6372390f862bfc432397ad877a94669ccbb2f4bffbd8de1758e4d1ea3a5d395646f1c5d4b0bf79193d29adb08622581d9e3af317ec0655e0c9b5568
-
SSDEEP
12288:9eObOke6TorAx31Io8EL2XM3jo4ln2kX/5:9esEyokx315LUM3jo4l2kv5
Malware Config
Signatures
Files
-
d67e8389b4c3260f56fcc62ce51c4886288debcfeafc748e4a7e961b60129d8d.exe windows x86
597319b952f0148d1d5d2796fa2feb24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualLock
FileTimeToLocalFileTime
GetModuleHandleA
GetCurrentThreadId
CreateSemaphoreA
VirtualAlloc
GetProcAddress
lstrcatA
DeleteTimerQueue
user32
SendMessageA
LoadIconA
PostMessageA
DispatchMessageA
IsWindowUnicode
gdi32
GetPixel
ole32
CoInitialize
netapi32
NetDfsAddFtRoot
psapi
EnumProcessModules
avifil32
AVIMakeFileFromStreams
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 4KB - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 687KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE