Static task
static1
Behavioral task
behavioral1
Sample
d36bacad9971b7587076988f34d72766805df8dd798d8de6117bc2537822c95d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d36bacad9971b7587076988f34d72766805df8dd798d8de6117bc2537822c95d.exe
Resource
win10v2004-20220812-en
General
-
Target
d36bacad9971b7587076988f34d72766805df8dd798d8de6117bc2537822c95d
-
Size
651KB
-
MD5
fd174918a5e6cad1cc5bb6931b1f33e3
-
SHA1
dd1ea1374a706aeadb42d9a3c8a2e2421c4b5c38
-
SHA256
d36bacad9971b7587076988f34d72766805df8dd798d8de6117bc2537822c95d
-
SHA512
7357c311a7299bc67a559016acaf478d8a6e4e4ae36a0cc3eeb4fe99fc5249b8c537f78449b85dbfb8fd70170729ab6fb1d387e15f6e3359d862e2c9deeaa699
-
SSDEEP
12288:swj6F2fC6A8AoX7M5A+GW5bmRk8ob67qCQNea9LapKI6xPX2a:swGF2ad5PZmRk8b7qfBN+KI6xX
Malware Config
Signatures
Files
-
d36bacad9971b7587076988f34d72766805df8dd798d8de6117bc2537822c95d.exe windows x86
de0917e65992642fb5ad3cebed79f9c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteTimerQueue
GetDriveTypeA
ExitProcess
GetStdHandle
GetTickCount
DeleteCriticalSection
CloseHandle
GetTempPathA
HeapSize
GetStartupInfoA
HeapDestroy
SetEvent
GetLastError
ReleaseMutex
GetPrivateProfileStringA
VirtualProtect
CreateHardLinkA
IsValidCodePage
ResumeThread
lstrcmpiA
GetModuleHandleA
advapi32
LsaSetSecret
RegQueryValueExA
IsValidSid
LsaFreeMemory
CloseEventLog
GetSecurityInfo
OpenEventLogA
FreeSid
ReportEventA
RegEnumValueA
RegCloseKey
IsValidAcl
AccessCheck
RegCreateKeyExA
GetFileSecurityA
LsaClose
CloseTrace
RegEnumKeyExA
IsWellKnownSid
RegLoadKeyA
apphelp
SdbFindFirstTag
ApphelpShowDialog
SdbFreeFlagInfo
ApphelpCheckIME
SdbFindNextTag
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ