Static task
static1
Behavioral task
behavioral1
Sample
d6886f461b000bf59055fc42283743a8dfb30576a8287e23c10b6ed80aadd23c.exe
Resource
win7-20220812-en
General
-
Target
d6886f461b000bf59055fc42283743a8dfb30576a8287e23c10b6ed80aadd23c
-
Size
287KB
-
MD5
d4e51478deb05fc3c82a0d34bc68d843
-
SHA1
bce040e101ca7063bacf4b3554f5ec0033bf040d
-
SHA256
d6886f461b000bf59055fc42283743a8dfb30576a8287e23c10b6ed80aadd23c
-
SHA512
f207662e09aada9e44ea5835156901cf27dde68ba5b4852dfe6988c265e45d6049f68d4f23cb4f7036db56b75295d942d43e416aa976afd7c83c6a479aab9ce7
-
SSDEEP
6144:6eNRVAmnvpU4DgBxcdm0fDEPGdFGJCUc5XL5r:6eNgBzOD6GdF8CUkL5
Malware Config
Signatures
Files
-
d6886f461b000bf59055fc42283743a8dfb30576a8287e23c10b6ed80aadd23c.exe windows x86
1ee2cd0025528b53b0c4c6d28057e1cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
GetModuleHandleW
QueryPerformanceCounter
GlobalFindAtomW
FoldStringW
TerminateProcess
GetCurrentThreadId
GetLocaleInfoW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InterlockedCompareExchange
GetTickCount
EnumResourceLanguagesA
IsDebuggerPresent
VirtualProtect
GetStartupInfoA
LocalAlloc
GetPrivateProfileSectionW
GetCurrentProcessId
InterlockedExchange
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcess
DeleteFileW
shlwapi
GetAcceptLanguagesA
PathCreateFromUrlW
StrCmpIW
PathAppendW
UrlCreateFromPathW
PathIsRelativeW
PathFindExtensionW
PathRemoveFileSpecW
UrlUnescapeW
PathCombineW
oleacc
CreateStdAccessibleObject
Sections
.text Size: 148KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ