d85632b1bee2172f7b4be41fb76e876e12c7ccde1facc7586c5eedcf7dd5fb4c | Triage

Submit
Reports

Overview

overview

Static

static

1

d85632b1be...4c.exe

windows7-x64

d85632b1be...4c.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

d85632b1bee2172f7b4be41fb76e876e12c7ccde1facc7586c5eedcf7dd5fb4c.exe

Resource

win7-20230220-en

gh0strat persistence rat upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

d85632b1bee2172f7b4be41fb76e876e12c7ccde1facc7586c5eedcf7dd5fb4c.exe

Resource

win10v2004-20230220-en

gh0strat persistence rat upx

windows10-2004-x64

12 signatures

150 seconds

General

Target

d85632b1bee2172f7b4be41fb76e876e12c7ccde1facc7586c5eedcf7dd5fb4c
Size

2.6MB
MD5

6833df85b0578b81e420746748cca46f
SHA1

adfa3f7910a40b56654498ee739ca64faf88780b
SHA256

d85632b1bee2172f7b4be41fb76e876e12c7ccde1facc7586c5eedcf7dd5fb4c
SHA512

afbc6359b3a1c7022188f0c0cd2c9685deecba6977c80b49307e1783fca6348255a3ba72e64522d4e761632615a7894ab2743f53ba0f623fed7877b738b124ca
SSDEEP

49152:4TpSPSNZ2AroZ1hXS9sPuB8/ljlffP4KJp+fa3rLA6s+/wboK:HPLAw1hX0l2/rfAgp0a3X5

Score

1^/10

Malware Config

Signatures

Files

d85632b1bee2172f7b4be41fb76e876e12c7ccde1facc7586c5eedcf7dd5fb4c
.exe windows x86

1b9df46d4417cab74b403cbf46fe2ce2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
Sleep
SizeofResource

user32

ShowWindow
FindWindowA

shell32

ShellExecuteA

mfc42

ord537
ord535
ord353
ord6385
ord561
ord815
ord800
ord665
ord1979

msvcrt

__CxxFrameHandler
fclose
_controlfp
fopen
exit
_access
__dllonexit
_onexit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
fwrite

msvcp60

??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy