Static task
static1
Behavioral task
behavioral1
Sample
dcd71ceff40224b7c119b6a30aacc5c1d2dd532790829472885b8c1b6e6acafb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcd71ceff40224b7c119b6a30aacc5c1d2dd532790829472885b8c1b6e6acafb.exe
Resource
win10v2004-20220812-en
General
-
Target
dcd71ceff40224b7c119b6a30aacc5c1d2dd532790829472885b8c1b6e6acafb
-
Size
400KB
-
MD5
31dbe5c604fc96f713af5aeb29381923
-
SHA1
5ccde773247f4a7bbbdb9198c80ab4ac9ef6eeb5
-
SHA256
dcd71ceff40224b7c119b6a30aacc5c1d2dd532790829472885b8c1b6e6acafb
-
SHA512
e29295bf09ab31768724d058388ebbe3003b7d73cc8b852bd50f044981923b16f8e52705c5eb69a6ecafb9c3d135c9b7c513da4a2eb2699d9ae2e4a9a1e89f60
-
SSDEEP
12288:YuXCKDOdtG8vbI9JeFDWd9y1OomZ4ZQvLm:YuXBDcE8vbg0AzZuoL
Malware Config
Signatures
Files
-
dcd71ceff40224b7c119b6a30aacc5c1d2dd532790829472885b8c1b6e6acafb.exe windows x86
38755141472a01000ac22e8b09f748a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CloseHandle
GlobalLock
GetModuleHandleA
VirtualAlloc
FlushFileBuffers
GetProcAddress
DeleteTimerQueue
VirtualProtect
VirtualFree
OpenSemaphoreA
GetProcessHeap
GetLocalTime
TerminateThread
GetLastError
VirtualUnlock
GetCurrentThread
LocalReAlloc
InterlockedExchange
GetSystemInfo
GetLocaleInfoA
HeapSize
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStringTypeA
VirtualQuery
user32
LoadIconA
IsZoomed
IsWindowUnicode
LoadAcceleratorsA
GetDesktopWindow
winmm
joySetCapture
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 340KB - Virtual size: 694KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ