Static task
static1
Behavioral task
behavioral1
Sample
d81dd396b6e6dbb2d706bb45cb8f6df47ff12a5b5717a5935e53fb53f8fe133b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d81dd396b6e6dbb2d706bb45cb8f6df47ff12a5b5717a5935e53fb53f8fe133b.exe
Resource
win10v2004-20221111-en
General
-
Target
d81dd396b6e6dbb2d706bb45cb8f6df47ff12a5b5717a5935e53fb53f8fe133b
-
Size
560KB
-
MD5
3090ebcb1e8a4f6e673110656b4a94e4
-
SHA1
cc2944a4ce64d3dd1d7bc805a560de49fa827557
-
SHA256
d81dd396b6e6dbb2d706bb45cb8f6df47ff12a5b5717a5935e53fb53f8fe133b
-
SHA512
173f8f66652661e4231de480b935cd07682d0885d8430ab7224702350a606826945867c36a29cdf21d7653a531fecfe453882f4114d84eac21288cb89eae35b1
-
SSDEEP
6144:vo82AebfUPTMi0glKtd4lBpY0X49QhgJxE29ItMRL78PHXXr+Ig8HRHrHwgf1j7F:vgA+CVKtKTXMUgTFaYS5dD9j9k8mX+
Malware Config
Signatures
Files
-
d81dd396b6e6dbb2d706bb45cb8f6df47ff12a5b5717a5935e53fb53f8fe133b.exe windows x86
66e192e4efe2a0e73fa922e7301efe62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetLastError
DeleteFileA
TerminateThread
GetProcAddress
WaitForSingleObject
GetTickCount
WriteFile
PulseEvent
GetModuleHandleA
TerminateProcess
DeleteFileW
CloseHandle
GetSystemInfo
VirtualProtect
LoadLibraryA
Sleep
GetLocaleInfoA
HeapSize
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
VirtualQuery
user32
LoadBitmapA
gdi32
CreatePen
ole32
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
ws2_32
recv
winmm
midiInClose
mciSendCommandA
Sections
.data Size: 500KB - Virtual size: 498KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ltext Size: 44KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ