Static task
static1
Behavioral task
behavioral1
Sample
d7ce1acb5a45d6e08d0c9cce182d084347f95bfc640c3feb1beb6698822d0666.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d7ce1acb5a45d6e08d0c9cce182d084347f95bfc640c3feb1beb6698822d0666.exe
Resource
win10v2004-20221111-en
General
-
Target
d7ce1acb5a45d6e08d0c9cce182d084347f95bfc640c3feb1beb6698822d0666
-
Size
150KB
-
MD5
1f7e1cff070dde46f57bdd3eb14d5f53
-
SHA1
51b66922851561b994e27bc4a48d139938e3aa33
-
SHA256
d7ce1acb5a45d6e08d0c9cce182d084347f95bfc640c3feb1beb6698822d0666
-
SHA512
695f5608067707ed3dd5b0f0e81b2eb05ad6856d46e804f7d50f7e24cb6d9e733f9198b5c910e94993c7c30974accd6f5f854380e639bb6c2a7e98afbb2a3226
-
SSDEEP
3072:mlollZEpI52d/pKHdR7a+Q389jDU5X2OfklU6:mlollWpi2d/QHdRSTe
Malware Config
Signatures
Files
-
d7ce1acb5a45d6e08d0c9cce182d084347f95bfc640c3feb1beb6698822d0666.exe windows x86
48bc8670adefeec3dd85a9731578fb63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
lstrcmpiA
OpenProcess
TerminateProcess
CloseHandle
Process32First
CreateToolhelp32Snapshot
WriteFile
CreateFileA
LoadResource
SizeofResource
GetModuleHandleA
FindResourceA
GetWindowsDirectoryA
GlobalFree
LockResource
GlobalAlloc
Sleep
GetLastError
CreateMutexA
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
RtlUnwind
shell32
ShellExecuteA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ