Static task
static1
Behavioral task
behavioral1
Sample
d6ed1323230facf3500b419f298756539f6f81ac7f14c85cdeda806aaa2f7e0e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d6ed1323230facf3500b419f298756539f6f81ac7f14c85cdeda806aaa2f7e0e.exe
Resource
win10v2004-20221111-en
General
-
Target
d6ed1323230facf3500b419f298756539f6f81ac7f14c85cdeda806aaa2f7e0e
-
Size
30KB
-
MD5
9e96c73b2d6857b3388fdcf74c83755e
-
SHA1
9410dbedab16db585b32e11f14e7135007090c16
-
SHA256
d6ed1323230facf3500b419f298756539f6f81ac7f14c85cdeda806aaa2f7e0e
-
SHA512
97a94d3bd3e12e7a2fc6f7a27b9377067459e6a8235956fcc4a5e94ab1596c555dbdb5fb89a136031b8074711f181cabc3918b8eabed5741ae6a8963a111ff38
-
SSDEEP
768:4zr4Rkcjjtg0+zs60twK0FH4glOeDC8cLRL:5tjjAs6f3Oem82RL
Malware Config
Signatures
Files
-
d6ed1323230facf3500b419f298756539f6f81ac7f14c85cdeda806aaa2f7e0e.exe windows x86
e44a6e625cc5024b2706cd1794085592
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ProcessIdToSessionId
CancelWaitableTimer
GetConsoleAliasExesLengthA
RegisterWaitForSingleObject
SetCurrentDirectoryA
LocalFlags
SetConsoleTitleW
ReadConsoleInputA
GetConsoleTitleW
FileTimeToLocalFileTime
MoveFileWithProgressW
user32
UpdatePerUserSystemParameters
MapVirtualKeyA
SystemParametersInfoA
GetTabbedTextExtentA
EnumPropsExA
DefFrameProcW
LoadStringA
LoadCursorFromFileW
CsrBroadcastSystemMessageExW
GetThreadDesktop
DrawCaptionTempA
Sections
.text Size: 27KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ