Static task
static1
Behavioral task
behavioral1
Sample
dbd97158db5ee0c2e1ccffa9c2154cd5b4d7e3a72974925a63b4e76ad024b4af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbd97158db5ee0c2e1ccffa9c2154cd5b4d7e3a72974925a63b4e76ad024b4af.exe
Resource
win10v2004-20220812-en
General
-
Target
dbd97158db5ee0c2e1ccffa9c2154cd5b4d7e3a72974925a63b4e76ad024b4af
-
Size
301KB
-
MD5
73b76e72dbb108de76a0a768ed3c3c90
-
SHA1
e46035912dc3320d58e586b8df82c12984e2995b
-
SHA256
dbd97158db5ee0c2e1ccffa9c2154cd5b4d7e3a72974925a63b4e76ad024b4af
-
SHA512
1e69d3a795c08260df3ddbb0e27d41d2f822f443b94b92befd19ab9e922600c9a4b20504c121634a3aa9796e4442c0554cf456b9a60934bf898c66d73e9a9469
-
SSDEEP
6144:GlWnem8G838EYBHTkA2XS0xq2MrIY5mx04kfdm+:GUemB838xBTkA2bqToxoVm
Malware Config
Signatures
Files
-
dbd97158db5ee0c2e1ccffa9c2154cd5b4d7e3a72974925a63b4e76ad024b4af.exe windows x86
00824eac16c86ffa171ce0b74931fa87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
GetTickCount
FindClose
IsBadWritePtr
HeapFree
GetStringTypeA
GetExitCodeThread
VirtualProtect
GetFileAttributesA
MapViewOfFile
FindResourceW
TlsGetValue
IsValidCodePage
GetLocaleInfoW
GetDriveTypeW
GetModuleHandleA
GetFileAttributesA
RemoveDirectoryW
LocalLock
GetCurrentProcess
SetLastError
user32
PostMessageW
DispatchMessageA
LoadCursorA
wsprintfW
IsWindow
SetCursor
LoadImageW
GetWindowLongW
SetFocus
IsDialogMessageA
PeekMessageW
GetWindowTextW
LoadStringA
msctf
DllUnregisterServer
TF_InitSystem
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE