Static task
static1
Behavioral task
behavioral1
Sample
d383091018d938df20c10c58702b701799449eda484bd85aecfd8a31f2e6da72.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d383091018d938df20c10c58702b701799449eda484bd85aecfd8a31f2e6da72.exe
Resource
win10v2004-20221111-en
General
-
Target
d383091018d938df20c10c58702b701799449eda484bd85aecfd8a31f2e6da72
-
Size
272KB
-
MD5
13ddd9476421d7a6c08bd78949599989
-
SHA1
66893cabb17f263b564ad408c2470b64ed97e561
-
SHA256
d383091018d938df20c10c58702b701799449eda484bd85aecfd8a31f2e6da72
-
SHA512
3642dd40d91d0306474ac641628b98795ed44f2c6a8ee41290149aed560b45c5eb207c4cf54abece44f45d9baaa98a4e729f479585955becc40ab1f361f83c71
-
SSDEEP
3072:NJNGAdy/MtLzqs4CDfl1ahd3TqnbayhPSNNGH0Ar/Ha+rTsheTUa/f0Fj47OJ9LA:NGsyY8CDtwL4bH/TrS+/sKUa/8kOJI2m
Malware Config
Signatures
Files
-
d383091018d938df20c10c58702b701799449eda484bd85aecfd8a31f2e6da72.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.xxDq Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8354 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SSx3 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE