Static task
static1
Behavioral task
behavioral1
Sample
dcd34e4c18a693daaf12eb229e1b4d11a4b79f93deed57ac0faa0c89f5aee999.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcd34e4c18a693daaf12eb229e1b4d11a4b79f93deed57ac0faa0c89f5aee999.exe
Resource
win10v2004-20220901-en
General
-
Target
dcd34e4c18a693daaf12eb229e1b4d11a4b79f93deed57ac0faa0c89f5aee999
-
Size
151KB
-
MD5
76c9ce0e2ee6d8dd183a51af699d93f6
-
SHA1
f5b2c2ad267d14c3d72f89a79f638510f3c2c508
-
SHA256
dcd34e4c18a693daaf12eb229e1b4d11a4b79f93deed57ac0faa0c89f5aee999
-
SHA512
01127ccef563e6e008cf7e16b027b79ec6707288ebc772431d5117e3078aa6896b789924b10772ee43994b2fcd0642dd6a8de413f1c211eb2c6f37f45300f002
-
SSDEEP
3072:CDZL7/oXBcT7JkjkstZ1uy/Z17mko9CzoCps8IsS:CDSxcx8J5uybal9Czo8/S
Malware Config
Signatures
Files
-
dcd34e4c18a693daaf12eb229e1b4d11a4b79f93deed57ac0faa0c89f5aee999.exe windows x86
196913c023a259f2ac6344ac77dc2730
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
user32
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA
advapi32
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegCreateKeyA
RegDeleteValueA
RegSetValueA
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ