Static task
static1
Behavioral task
behavioral1
Sample
dbf2b5b5c63c89f628202f190da9e354137573d3cad150b63dd71851121171c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbf2b5b5c63c89f628202f190da9e354137573d3cad150b63dd71851121171c8.exe
Resource
win10v2004-20220812-en
General
-
Target
dbf2b5b5c63c89f628202f190da9e354137573d3cad150b63dd71851121171c8
-
Size
101KB
-
MD5
4efe723e51b923957e8a9efc28a56587
-
SHA1
3d7eaf535d3ac17fd6beadc3662fd2e1d19d6040
-
SHA256
dbf2b5b5c63c89f628202f190da9e354137573d3cad150b63dd71851121171c8
-
SHA512
90ff4b232b256125a1d49a0b55635244c9d11afdd8aa622dc5750fcb3a5d2b8e9890d0e6fbdc004c93cc72b902a284f832e862a8ec693a47c849769c6f061d25
-
SSDEEP
768:uegsmaPdS3zS8uhgVVvw0nP/d9nwG/u9+UAOaxdokvy/wbV0j9IvSdHjuv:uegMP6zihgYIP/LwTklbV0BIvSBjk
Malware Config
Signatures
Files
-
dbf2b5b5c63c89f628202f190da9e354137573d3cad150b63dd71851121171c8.exe windows x86
f573deccd28849de99a34b38c86cff6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
SetTextColor
shell32
ShellExecuteA
comdlg32
ChooseColorA
comctl32
ImageList_GetIconSize
Sections
CODE Size: 33KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE