Static task
static1
Behavioral task
behavioral1
Sample
d1bdeee430eeab68ca017b5239417347b1b34358a20b9deab575132cb653f285.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1bdeee430eeab68ca017b5239417347b1b34358a20b9deab575132cb653f285.exe
Resource
win10v2004-20220812-en
General
-
Target
d1bdeee430eeab68ca017b5239417347b1b34358a20b9deab575132cb653f285
-
Size
131KB
-
MD5
ae782bd86bd3b7355a17ce9578dc2d3f
-
SHA1
723bf8de7d802b94fd810e12cfef1c480a965646
-
SHA256
d1bdeee430eeab68ca017b5239417347b1b34358a20b9deab575132cb653f285
-
SHA512
efaa701d3c25fba95c78bc84eaaf7238f7f2eb47c6459c9bb68fec3f2a79ddf65d7de8c79d34323a8ca24f89406b66a6886b9a262f7197d1def55253df2346ad
-
SSDEEP
1536:aLV3uHZ1H+rGbDrJcniO3J75vstcleMeB+wSvZem0cZKC0zAG3Iz3Opt0Fov7I1V:eERt2znyyoe
Malware Config
Signatures
Files
-
d1bdeee430eeab68ca017b5239417347b1b34358a20b9deab575132cb653f285.exe windows x86
26928af0f76d7b4f12af4ed5320fad2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
UpdateResourceA
GetProcAddress
LoadLibraryA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetLastError
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
Sections
.test Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE