Static task
static1
Behavioral task
behavioral1
Sample
d4d25e83a30b5c936dfddb77008b93f0bd20a87a89f22a6b90dc513f9f865d88.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d4d25e83a30b5c936dfddb77008b93f0bd20a87a89f22a6b90dc513f9f865d88.exe
Resource
win10v2004-20220901-en
General
-
Target
d4d25e83a30b5c936dfddb77008b93f0bd20a87a89f22a6b90dc513f9f865d88
-
Size
40KB
-
MD5
48b6dbd5e7fef0ed0524ce1fe6a1318c
-
SHA1
be80dad53f40d9fb349960a1a9bb9719391042e1
-
SHA256
d4d25e83a30b5c936dfddb77008b93f0bd20a87a89f22a6b90dc513f9f865d88
-
SHA512
9246fe88a1a383acd1328cc90b5469a6ecdae987358fb45679fa14216976ad2f23fa516a49af579c2a63919e197b5aa721c5da11791a9cd2468a66cb97484ca9
-
SSDEEP
768:K8Mo4UyRy0gBj+oCI1hu+SNAGneUWSjl92ZH3plz56LcUHvk2MGf:K8brljNQFKGfLOZZldycUHmGf
Malware Config
Signatures
Files
-
d4d25e83a30b5c936dfddb77008b93f0bd20a87a89f22a6b90dc513f9f865d88.exe windows x86
e2411b56deb398913d5d9e8452ff9720
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateFileMappingA
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
ReleaseMutex
CloseHandle
LocalFree
LocalAlloc
GetStartupInfoA
UnhandledExceptionFilter
GetCurrentProcess
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleA
ExitProcess
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
IsBadReadPtr
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter
user32
MessageBoxA
LoadStringA
SetDlgItemTextA
EndDialog
SetWindowPos
DialogBoxParamA
SetTimer
GetParent
GetDesktopWindow
GetWindowRect
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ