Static task
static1
Behavioral task
behavioral1
Sample
d1605507b8b32dedf1aa6766de200dcc3f2720d187733aa22bce1672a70ce744.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1605507b8b32dedf1aa6766de200dcc3f2720d187733aa22bce1672a70ce744.exe
Resource
win10v2004-20221111-en
General
-
Target
d1605507b8b32dedf1aa6766de200dcc3f2720d187733aa22bce1672a70ce744
-
Size
5KB
-
MD5
09250724041ce883e0808f1309743c77
-
SHA1
3658d429160f9343283209b832549e2504433fb8
-
SHA256
d1605507b8b32dedf1aa6766de200dcc3f2720d187733aa22bce1672a70ce744
-
SHA512
bae1ca08b082d337fcc359cdefd8d1eba5576ebf3804830e107e0921f00ec003fa573e874d6e10780f586351a170f829bb10505cccca29249d76a8f1800e9022
-
SSDEEP
48:qfQiXTsWUl8LVNiOSg5n+18nE78AYu4OX+OlhZ5dp7KP2tORKP2tOodoBI1Pbu5W:KQYQ3M+18nE7YuD+0Pd1iNisq2Nbui
Malware Config
Signatures
Files
-
d1605507b8b32dedf1aa6766de200dcc3f2720d187733aa22bce1672a70ce744.exe windows x86
92fbeb1952829d37b9071a8856ddf652
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
iserver
ism@011
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 1024B - Virtual size: 1022B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ