Static task
static1
Behavioral task
behavioral1
Sample
dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7.exe
Resource
win10v2004-20220901-en
General
-
Target
dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7
-
Size
393KB
-
MD5
091a332468a95142bb0d2f847b1783e0
-
SHA1
44b0e95b43c4fff8241c2fe93dc29cbb2805e97d
-
SHA256
dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7
-
SHA512
0f948f1fa2fdd8d540af322d1abd74d9cec60ced941321f5d0eaa86371674bc5e2de6c517e48f45d82756f01057179618f4dfed32d12d22219efb45fdb7d6e8f
-
SSDEEP
12288:TUAkaIfdyvnRXDKmQ7FNJO4GJ6KAkA1HzwDKQ:TPxpmNBO4GJ9Ak4H
Malware Config
Signatures
Files
-
dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7.exe windows x86
ead67e3f7ac6d1803fc4d1ed19852f22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetStartupInfoA
GetFileAttributesW
WriteConsoleW
GetModuleHandleA
DeleteFileA
DisconnectNamedPipe
GetPriorityClass
GetCurrentDirectoryA
SetEvent
lstrlenW
VirtualProtect
GetCommandLineA
WriteConsoleW
WriteConsoleW
CreatePipe
ResumeThread
CopyFileA
lstrcpyA
GetStdHandle
HeapDestroy
mmcndmgr
DllRegisterServer
DllRegisterServer
DllUnregisterServer
DllUnregisterServer
shell32
SHGetSettings
DragAcceptFiles
DuplicateIcon
SHGetMalloc
SHGetDiskFreeSpaceA
ShellAboutA
StrChrA
ExtractIconA
SHFree
DragFinish
DllUnregisterServer
ShellMessageBoxA
DragQueryFileA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE