Static task
static1
Behavioral task
behavioral1
Sample
d894108dc96b1f18a8f745e777cbd323f92bafc730fb9a6668dc311379188c2c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d894108dc96b1f18a8f745e777cbd323f92bafc730fb9a6668dc311379188c2c.exe
Resource
win10v2004-20220901-en
General
-
Target
d894108dc96b1f18a8f745e777cbd323f92bafc730fb9a6668dc311379188c2c
-
Size
54KB
-
MD5
0f855788496fac43467bbdcbf6dce356
-
SHA1
47699f2914dde275f9dded4b9bba5f811458fa2c
-
SHA256
d894108dc96b1f18a8f745e777cbd323f92bafc730fb9a6668dc311379188c2c
-
SHA512
9c9cf4f04643341383b85dd4985893e3a72b4fc066eb42e4ef6790d7b63f011c6e278cbcca271fbe418a59b6c764481870fe87e7f2c4cd8211fdf3860346e221
-
SSDEEP
768:06+T6XwBE4YcwVFM+yXmiTjulxfVS4tLFcaM7p0UP2KRJ9sic5drgsHLzWx5ZKXn:bXnq+yX7jun44tc7C1KR48dZyIrY
Malware Config
Signatures
Files
-
d894108dc96b1f18a8f745e777cbd323f92bafc730fb9a6668dc311379188c2c.exe windows x86
8427fba7a82049e4787bd84cd4ab1048
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
HeapCreate
GetModuleHandleW
GetModuleFileNameW
GetSystemDirectoryW
GetUserDefaultLCID
SystemTimeToFileTime
GetConsoleMode
GetCommandLineA
CreateFileA
GetFileAttributesW
GetACP
ExitProcess
LoadLibraryExA
TlsAlloc
InterlockedIncrement
CreateThread
GetEnvironmentStrings
OpenEventA
ResetEvent
QueryPerformanceCounter
GetModuleHandleA
FindResourceA
OpenMutexA
GetOEMCP
ReleaseMutex
ReleaseSemaphore
GetTickCount
Sleep
GetStdHandle
GetProcessHeap
InitializeCriticalSection
LocalFree
WriteFile
FileTimeToSystemTime
ReadFile
CreateFileMappingW
GetSystemTimeAsFileTime
GetCurrentThreadId
SetEndOfFile
lstrcpyA
HeapDestroy
UnhandledExceptionFilter
DeleteFileA
InterlockedExchange
GetCPInfo
GetVersionExW
FreeEnvironmentStringsA
EnterCriticalSection
GetFileSize
GetComputerNameW
GetCurrentProcessId
GetCurrentProcess
SetStdHandle
UnmapViewOfFile
GlobalAlloc
GetThreadPriority
GetVersion
DeleteCriticalSection
GetExitCodeProcess
LeaveCriticalSection
GetCommandLineW
TlsSetValue
VirtualFree
GetLastError
VirtualAlloc
lstrlenW
FileTimeToLocalFileTime
GetFileAttributesA
HeapAlloc
GetThreadLocale
user32
TranslateMessage
EndDialog
GetSysColor
InsertMenuA
GetAsyncKeyState
GetForegroundWindow
MapWindowPoints
CallWindowProcW
UnregisterClassW
GetSystemMetrics
FillRect
GetParent
GetWindowRect
FindWindowA
LoadBitmapA
DispatchMessageA
ShowWindow
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 512B - Virtual size: 451B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ