Static task
static1
Behavioral task
behavioral1
Sample
d0556c9c54a9dfbac7d666995b464a7ad61873ab42919c01061e3a86846a7349.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d0556c9c54a9dfbac7d666995b464a7ad61873ab42919c01061e3a86846a7349.exe
Resource
win10v2004-20220812-en
General
-
Target
d0556c9c54a9dfbac7d666995b464a7ad61873ab42919c01061e3a86846a7349
-
Size
258KB
-
MD5
9114375461f4163fd7e0a4598cead988
-
SHA1
6777192414eec9d3a47c35cc5d40a4a3f25a4088
-
SHA256
d0556c9c54a9dfbac7d666995b464a7ad61873ab42919c01061e3a86846a7349
-
SHA512
5dae8369a1706ac33a78edcec90e762755f86ca7f8b636bf239ef81b5c4a0eeb995e8344bf33c0ad5c67c21d1a6025341bda7af716ca057ea3463a8277dd744d
-
SSDEEP
6144:bYHdq0nY6nRFRhR/W5ATVpKRqgzLUuZbeOE5Vr3:bYHdq0nY6vRhR/WyTVpKzzLU25Efr3
Malware Config
Signatures
Files
-
d0556c9c54a9dfbac7d666995b464a7ad61873ab42919c01061e3a86846a7349.exe windows x86
c6a119d72213992b8929fceed04291fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
SetFilePointer
LoadLibraryExA
LocalAlloc
WriteFile
WideCharToMultiByte
SetEndOfFile
SetThreadLocale
SetHandleCount
VirtualAllocEx
LocalFree
ResetEvent
LoadLibraryA
GetVersionExA
GetLastError
MoveFileA
GetCommandLineW
lstrcpyA
VirtualQuery
lstrcatA
LocalReAlloc
IsBadHugeReadPtr
GlobalAlloc
HeapDestroy
GetCommandLineA
ExitProcess
MoveFileExA
GetModuleHandleA
GetProcAddress
MulDiv
lstrlenW
SetEvent
lstrcpynA
IsBadReadPtr
lstrcmpA
user32
GetMenuState
InsertMenuItemA
InvalidateRect
IsWindow
GetSystemMenu
GetKeyboardLayoutNameA
GetLastActivePopup
GetClipboardData
GetMenu
GetKeyboardLayoutList
GetDC
InflateRect
GetParent
GetWindowRect
GetScrollPos
GetCursorPos
IsDialogMessageW
GetPropA
GetDCEx
GetSysColor
GetMessagePos
GetTopWindow
gdi32
BitBlt
CreateBitmap
CopyEnhMetaFileA
Sections
CODE Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES72 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES78 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES54 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES91 Size: 1024B - Virtual size: 967B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES28 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES25 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES23 Size: 1024B - Virtual size: 675B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES71 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ