Static task
static1
Behavioral task
behavioral1
Sample
de23a55f12c34406a3dd63305eecc97b7040cd76c17863c862245b0024b64490.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de23a55f12c34406a3dd63305eecc97b7040cd76c17863c862245b0024b64490.exe
Resource
win10v2004-20221111-en
General
-
Target
de23a55f12c34406a3dd63305eecc97b7040cd76c17863c862245b0024b64490
-
Size
272KB
-
MD5
9d3433d3d710e2622e0cd63a7c045e70
-
SHA1
d62a5db53b813ab7582e827e118779e3e495320c
-
SHA256
de23a55f12c34406a3dd63305eecc97b7040cd76c17863c862245b0024b64490
-
SHA512
c95fe7541e35756e9642047bede31a972b1af7c4ac388ee49bd5b6ff94b9daae2efcf27763fa515382a65db3b0152f1c5843fe84ceb2b1d81d5984178018ca63
-
SSDEEP
6144:ouAoVUnJNOQzTXy+O81lkNB9DEL0J5pmHrDhDlsQDavmKKARF:7AIUnyUf/1y3J5IH3RlcmRA
Malware Config
Signatures
Files
-
de23a55f12c34406a3dd63305eecc97b7040cd76c17863c862245b0024b64490.exe windows x86
0450ced59bdc31617ce09771eb79ae45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CompareFileTime
ConvertThreadToFiber
CreateDirectoryA
CreateWaitableTimerW
ExitProcess
GetNumberFormatW
GetSystemDirectoryW
GetTempPathW
GlobalFindAtomW
HeapReAlloc
OpenMutexA
OpenSemaphoreA
VirtualProtect
WritePrivateProfileStringA
advapi32
BuildExplicitAccessWithNameW
BuildTrusteeWithSidW
CryptEnumProviderTypesA
CryptSetKeyParam
CryptSetProviderExW
FreeSid
GetAccessPermissionsForObjectW
RegCloseKey
SetEntriesInAclW
gdi32
CloseFigure
CreatePolyPolygonRgn
DeleteColorSpace
GdiSetBatchLimit
GetCharWidthW
GetSystemPaletteEntries
GetTextAlign
LineDDA
StartPage
UpdateICMRegKeyW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ