Static task
static1
Behavioral task
behavioral1
Sample
d4f43e70f7907653b0510ca9f75c0f818e972f277c2e86ef30fd3314b929a995.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d4f43e70f7907653b0510ca9f75c0f818e972f277c2e86ef30fd3314b929a995.exe
Resource
win10v2004-20220812-en
General
-
Target
d4f43e70f7907653b0510ca9f75c0f818e972f277c2e86ef30fd3314b929a995
-
Size
205KB
-
MD5
e39974d1ac56091cf43d9ffd3cc6411e
-
SHA1
8459eace056d28b829df4f63b5498754d5ffe396
-
SHA256
d4f43e70f7907653b0510ca9f75c0f818e972f277c2e86ef30fd3314b929a995
-
SHA512
5289f77e1460906a20ccaabbed040209df924c81468490141587fca3633f09505d1a6b527312589cc0d5e53de41305f922e05c14fc0ad2e9af36945e1b68b411
-
SSDEEP
3072:bB7h+RpKab7m/GjllQn/y1L5m6yCA44WxbfmNeLsYj3LErisWZnn:bCph7+n61de1axKWZjbZ
Malware Config
Signatures
Files
-
d4f43e70f7907653b0510ca9f75c0f818e972f277c2e86ef30fd3314b929a995.exe windows x86
5d26badcf18c83f4975c6aca4ff6bd27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LoadLibraryExA
lstrlenA
SuspendThread
WaitForSingleObject
GetVersion
GetCommandLineA
GetConsoleCP
CloseHandle
HeapReAlloc
GetStdHandle
GetSystemDefaultLangID
InterlockedExchange
GlobalUnlock
HeapCreate
VirtualProtect
GetAtomNameA
WaitForMultipleObjects
LocalSize
GetModuleHandleA
CompareFileTime
gdi32
CreateFontA
GetMetaFileA
Ellipse
AbortPath
BeginPath
GetStringBitmapA
FloodFill
CreatePalette
EngLineTo
DeleteDC
Escape
GetRgnBox
CreateICA
EndPath
DeleteObject
GetFontData
GetTextColor
GetMetaRgn
GdiFlush
EqualRgn
winmm
CloseDriver
auxGetVolume
auxSetVolume
OpenDriver
PlaySoundA
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ