Static task
static1
Behavioral task
behavioral1
Sample
dc2de7593277323c8b4bc31b84274cc5e7990ac9fc04598e03000da79d49461c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc2de7593277323c8b4bc31b84274cc5e7990ac9fc04598e03000da79d49461c.exe
Resource
win10v2004-20220812-en
General
-
Target
dc2de7593277323c8b4bc31b84274cc5e7990ac9fc04598e03000da79d49461c
-
Size
239KB
-
MD5
65ba0846468e3ff4ca0ca340604c0967
-
SHA1
3638186fe2916898aa01f3bb1101eb6ec08dcc86
-
SHA256
dc2de7593277323c8b4bc31b84274cc5e7990ac9fc04598e03000da79d49461c
-
SHA512
5452f2816015b1533de00ce5408dcb77f1a8866ee7e1c903a46bec23c207f90fba2c0483a3b239f35dc6941011ff6f1429d6fa475dad1b87852c3b9ae222a782
-
SSDEEP
6144:B7zwPR5d5PCij5Z9iwJFHlEJNx8Tr4cv8OJc:tzGpPCQEx8IQa
Malware Config
Signatures
Files
-
dc2de7593277323c8b4bc31b84274cc5e7990ac9fc04598e03000da79d49461c.exe windows x86
e9f8d4e12acbcbb5e0eef00c0ddcc98b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatW
LoadLibraryA
AddLocalAlternateComputerNameA
BuildCommDCBAndTimeoutsW
CancelTimerQueueTimer
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
HeapCreate
RaiseException
GetStartupInfoW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
lstrcpyA
LocalFree
HeapAlloc
GlobalFree
GetProcAddress
lstrcmpiA
GetLastError
GlobalUnlock
lstrlenW
MultiByteToWideChar
ExitThread
ole32
CoCreateInstance
iphlpapi
DisableMediaSense
Sections
.text Size: 256B - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ