Static task
static1
Behavioral task
behavioral1
Sample
d1e657e13521b3d9aedf4f91dae809714f3655b6d1bdae75be3a173e3c085839.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1e657e13521b3d9aedf4f91dae809714f3655b6d1bdae75be3a173e3c085839.exe
Resource
win10v2004-20220812-en
General
-
Target
d1e657e13521b3d9aedf4f91dae809714f3655b6d1bdae75be3a173e3c085839
-
Size
307KB
-
MD5
97b964a70f4de5303075fda2ac066d54
-
SHA1
b684f3213d25f2c15533a28399db55df94be0022
-
SHA256
d1e657e13521b3d9aedf4f91dae809714f3655b6d1bdae75be3a173e3c085839
-
SHA512
ad38896cd2ada32399e76d3bd96c2b67fd8de700d0b1ca3cae7866e628469738c6d2bb5829d9866c450f4e2d064a875bda2f42efe5fe3f5b0bfef8a10b4d2945
-
SSDEEP
6144:57J1z8mEjLbZ4OrqCvGLzX9g6534o3pums3GXd5F:zd8xZ4OrqCvgzX534283GX1
Malware Config
Signatures
Files
-
d1e657e13521b3d9aedf4f91dae809714f3655b6d1bdae75be3a173e3c085839.exe windows x86
24ac9ef563bfd39e739243476e5575ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
CloseHandle
GetComputerNameA
LoadLibraryA
SetEvent
GetSystemTime
CreateFileA
GetCommandLineA
SetLastError
FindAtomA
ReleaseMutex
lstrcatA
CreateThread
GetDiskFreeSpaceW
GetTickCount
GetDriveTypeW
GetFileAttributesA
HeapCreate
LocalFree
LoadLibraryW
user32
FillRect
CloseWindow
DestroyCaret
GetClipCursor
DrawStateA
GetDlgItem
GetKeyState
GetClassInfoA
GetComboBoxInfo
CallWindowProcA
SetFocus
CreateWindowExA
DispatchMessageA
cryptnet
CryptGetObjectUrl
CryptUninstallCancelRetrieval
CertDllVerifyCTLUsage
CryptCancelAsyncRetrieval
CryptGetTimeValidObject
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ