Static task
static1
Behavioral task
behavioral1
Sample
df0236ed3089f19040f5e04e357831e14738070315d86c0e718e872ab1ac23ad.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df0236ed3089f19040f5e04e357831e14738070315d86c0e718e872ab1ac23ad.exe
Resource
win10v2004-20220901-en
General
-
Target
df0236ed3089f19040f5e04e357831e14738070315d86c0e718e872ab1ac23ad
-
Size
392KB
-
MD5
6db529f35828d6e11f8fd854efc85c10
-
SHA1
2f3638df704d662cde0e71ed6784399f54512c01
-
SHA256
df0236ed3089f19040f5e04e357831e14738070315d86c0e718e872ab1ac23ad
-
SHA512
88a3702397af477ae5ceebca24b2f4f74bdd5e84b1da43c6690f1422cf7bc005b362533f6eac09c6619ca58a366ba8b197c8d631f4473401c08aba86513fcb06
-
SSDEEP
6144:vpV0vEBApuMkrc7mRnQzpCMstSRe4WnmI0zqFbYHSieZzHlwtdF+Nw5ViXQelKec:BivXuMk47mVSQPCesdqcLgHlQFoRQS
Malware Config
Signatures
Files
-
df0236ed3089f19040f5e04e357831e14738070315d86c0e718e872ab1ac23ad.exe windows x86
778458adf6998fd46fbbb1c260536562
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
PulseEvent
ResumeThread
HeapDestroy
GetCurrentThreadId
VirtualProtect
GetTickCount
GetLocaleInfoA
CreateFileW
SetEvent
InterlockedExchange
CreateDirectoryA
LeaveCriticalSection
GetModuleFileNameA
CreateMutexA
lstrlenA
IsValidLocale
GlobalFlags
GetFileAttributesW
GetModuleHandleA
SuspendThread
CreateFileW
OpenEventW
AddAtomA
SetFilePointer
GetVersionExA
user32
LoadCursorA
IsMenu
DestroyMenu
SetRect
GetWindowTextA
SetFocus
GetWindowLongA
MessageBoxA
DispatchMessageA
DestroyIcon
PeekMessageA
GetWindowLongA
wsprintfA
dplayx
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 387KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE