Static task
static1
Behavioral task
behavioral1
Sample
d818e06d95f924af706827d34bc0dab9e64bc185e53ad2bafa55756caf09c6d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d818e06d95f924af706827d34bc0dab9e64bc185e53ad2bafa55756caf09c6d7.exe
Resource
win10v2004-20221111-en
General
-
Target
d818e06d95f924af706827d34bc0dab9e64bc185e53ad2bafa55756caf09c6d7
-
Size
192KB
-
MD5
efd98a728088bcc6a0f784b89d834223
-
SHA1
19f9ec681cd89921d2fe382997b05ce2f464cb5a
-
SHA256
d818e06d95f924af706827d34bc0dab9e64bc185e53ad2bafa55756caf09c6d7
-
SHA512
6a4de9705c38995cafcd82aa8fb064549f4544b7ae7ed20a70baadd732faa2115f4c77d72898ee9ff0e97a22e855f817b8515995eb7af72974e5171d62cee886
-
SSDEEP
3072:gRdxFKBVaJvrbHCjHSVEGVTxn2tx8n3+uCDN/Z8SX3dOJSIFXAtRSrw/:grxFSat+jHSaOdnCE3PYNiSXGShC
Malware Config
Signatures
Files
-
d818e06d95f924af706827d34bc0dab9e64bc185e53ad2bafa55756caf09c6d7.exe windows x86
d1c984d16fa5370a58e3e69b922912c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
SetProcessWorkingSetSize
lstrlenA
IsDBCSLeadByte
LoadResource
lstrcmpiA
GetCurrentThreadId
GetProcessHeap
LoadLibraryExA
LoadLibraryA
LockResource
lstrcpyA
EnumResourceNamesW
DisableThreadLibraryCalls
lstrcatA
GetCurrentProcess
HeapAlloc
Heap32ListNext
FindResourceA
GetModuleHandleA
SizeofResource
lstrcpynA
MulDiv
FreeLibrary
GetModuleFileNameA
HeapFree
ole32
CoQueryProxyBlanket
StringFromCLSID
gdi32
GetTextMetricsA
DeleteObject
GetDeviceCaps
GetTextExtentPointA
SelectObject
CreateFontIndirectA
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ