Static task
static1
Behavioral task
behavioral1
Sample
dee8bd9db31056d06ebfbe8a5ea5a31485c00ccde0b4a15a1b7e353a55ccc4d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dee8bd9db31056d06ebfbe8a5ea5a31485c00ccde0b4a15a1b7e353a55ccc4d4.exe
Resource
win10v2004-20220812-en
General
-
Target
dee8bd9db31056d06ebfbe8a5ea5a31485c00ccde0b4a15a1b7e353a55ccc4d4
-
Size
293KB
-
MD5
6ddcefabd97bf6e412051aeb813cfd50
-
SHA1
8b49521be499de8d1a455c2d910b06d11052a1ba
-
SHA256
dee8bd9db31056d06ebfbe8a5ea5a31485c00ccde0b4a15a1b7e353a55ccc4d4
-
SHA512
60301dce0318d77013f933a241b2ae4a5068c3800a7d65621fa79759d0a70b9d5f75e117488180bce6311f263fbc25386cbe0ad2bed54388846787c9a7f70ecf
-
SSDEEP
6144:qTA3eCcxdclseexLltG5n0maiQVl0uGBUmZI4Wl3:qTCeC+OaBtQnQVWfD2l
Malware Config
Signatures
Files
-
dee8bd9db31056d06ebfbe8a5ea5a31485c00ccde0b4a15a1b7e353a55ccc4d4.exe windows x86
f9401060e4f28880b0325901567833ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
WriteConsoleW
WriteConsoleW
DeleteFileA
GetPriorityClass
HeapDestroy
GetStdHandle
WriteConsoleW
CopyFileA
SetEvent
VirtualProtect
lstrlenW
ResumeThread
GetModuleHandleA
GetProcessHeap
lstrcpyA
GetCommandLineA
DisconnectNamedPipe
GetFileAttributesW
CreatePipe
GetCurrentDirectoryA
mmcndmgr
DllUnregisterServer
DllRegisterServer
DllRegisterServer
DllUnregisterServer
shell32
ExtractIconA
SHGetSettings
SHFree
DragQueryFileA
DuplicateIcon
ShellMessageBoxA
SHGetDiskFreeSpaceA
DragFinish
ShellAboutA
SHGetMalloc
DllUnregisterServer
DragAcceptFiles
StrChrA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE