Static task
static1
Behavioral task
behavioral1
Sample
dc6569bc1de74f6bf60bf624bbc74deb6eb8708d2b0ecffb0bd961e7ffd48c48.exe
Resource
win7-20220812-en
General
-
Target
dc6569bc1de74f6bf60bf624bbc74deb6eb8708d2b0ecffb0bd961e7ffd48c48
-
Size
193KB
-
MD5
71fbc5e1f565023bbc457b646fec06bf
-
SHA1
8655e18ca670be3ffcbeaaf45fd492f772fb65da
-
SHA256
dc6569bc1de74f6bf60bf624bbc74deb6eb8708d2b0ecffb0bd961e7ffd48c48
-
SHA512
74d01e4bd93778c143d57256a751484cad65354501bd323c5b674b10e1e0f111fb7e7b49731b4cb1bb698523c55ec855d7d49b6be5b07eb850155fd07e54a8b8
-
SSDEEP
6144:mRuu03hWIRwHvgWGO6eJqu5Vz7Bav6SGCDamdaq:mXRZ40J35VfMv/GCDtaq
Malware Config
Signatures
Files
-
dc6569bc1de74f6bf60bf624bbc74deb6eb8708d2b0ecffb0bd961e7ffd48c48.exe windows x86
b8798bf9b15f044f8c4fc1e72b7df852
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetProcessHeap
GetModuleHandleA
GlobalAddAtomW
HeapFree
SetLastError
InterlockedExchange
LoadResource
MultiByteToWideChar
EnumResourceTypesA
CloseHandle
LoadLibraryW
FindFirstFileW
EnumResourceNamesA
GetLastError
FindResourceExA
LockResource
GetProcAddress
EnumResourceLanguagesA
HeapAlloc
FormatMessageA
GetCommandLineA
GetCurrencyFormatA
GetCurrentDirectoryA
EnumResourceNamesA
SizeofResource
LocalFree
FindNextFileW
GlobalFree
FindFirstFileA
RaiseException
Sleep
user32
IsWindowVisible
wsprintfW
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
wsprintfA
Sections
.text Size: 106KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ