Static task
static1
Behavioral task
behavioral1
Sample
dee3373149697ef5cb6d2a1a49de4c5aa9f704e8b563a4b3e43e7ee594384fb9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dee3373149697ef5cb6d2a1a49de4c5aa9f704e8b563a4b3e43e7ee594384fb9.exe
Resource
win10v2004-20220812-en
General
-
Target
dee3373149697ef5cb6d2a1a49de4c5aa9f704e8b563a4b3e43e7ee594384fb9
-
Size
240KB
-
MD5
4f12156e0bc0dbc90ff47ddfd13fd170
-
SHA1
2cced123386de76588dd8fa9b4a0c392c57844ad
-
SHA256
dee3373149697ef5cb6d2a1a49de4c5aa9f704e8b563a4b3e43e7ee594384fb9
-
SHA512
d09311d22d63ce26670f39e04c704a46a83a757d87ee806ea1b8be9d691aebcc8dccaf7c14634ad1948137c98424dff9e2e6539d62c102c5543b791274fc18c0
-
SSDEEP
6144:fEO/t5NLxmmsW+u/J6fr+dwi0EjgubYuSSPel1PqkptEs:8is+e64ELbYuPmllT
Malware Config
Signatures
Files
-
dee3373149697ef5cb6d2a1a49de4c5aa9f704e8b563a4b3e43e7ee594384fb9.exe windows x86
bc346306bbeef7ef23ffa06151ed8bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA
user32
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA
advapi32
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegSetValueA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ