Static task
static1
Behavioral task
behavioral1
Sample
dec1bc53ca00dcd8b34f5e8da0250c4ddc7bc202f3c270487754e66506bda7d5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dec1bc53ca00dcd8b34f5e8da0250c4ddc7bc202f3c270487754e66506bda7d5.exe
Resource
win10v2004-20220812-en
General
-
Target
dec1bc53ca00dcd8b34f5e8da0250c4ddc7bc202f3c270487754e66506bda7d5
-
Size
63KB
-
MD5
719abb07ebf860fc3fa692d053d80810
-
SHA1
787e998207d5b51e31ce88d492424b28e177d8cc
-
SHA256
dec1bc53ca00dcd8b34f5e8da0250c4ddc7bc202f3c270487754e66506bda7d5
-
SHA512
814eb78f5493b40159e817666c0b35a0bffa03a2f86d7d6c6cfa26bf9ac93915c7e96d471342f78c31c9db8526290fe9367cc54592c44ccf2c69e4db58e29e9e
-
SSDEEP
1536:rflmzhk0G6N3tNM6w/807OHropBJ0uwluO/rrJItewM:rfYNjhwE06HKBJ0uMNIAwM
Malware Config
Signatures
Files
-
dec1bc53ca00dcd8b34f5e8da0250c4ddc7bc202f3c270487754e66506bda7d5.exe windows x86
2f9f717d0780cf137be5a6fa1876fc44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProfileSectionW
lstrcmpA
GetNextVDMCommand
ResetEvent
GetProcessTimes
lstrcatW
HeapQueryInformation
DuplicateHandle
LoadLibraryA
CreateMutexW
GetConsoleFontSize
Module32First
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE