Static task
static1
Behavioral task
behavioral1
Sample
dc2939bda8664a8d3afdd6642d8c250fa12dead2ff276b6d316e3767f2b30030.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc2939bda8664a8d3afdd6642d8c250fa12dead2ff276b6d316e3767f2b30030.exe
Resource
win10v2004-20220901-en
General
-
Target
dc2939bda8664a8d3afdd6642d8c250fa12dead2ff276b6d316e3767f2b30030
-
Size
201KB
-
MD5
45a8b264db0f00478ece8402da509f4a
-
SHA1
5f208b8dd7005b0d5edc346a91c89ef94302fcb9
-
SHA256
dc2939bda8664a8d3afdd6642d8c250fa12dead2ff276b6d316e3767f2b30030
-
SHA512
76b494451aeb8cf7a50431f0084771384a35207048128c10363a3c7ae5798d48c5c4d0fd7769d7192b6a75792151838613503e0aef32a489ab5e44194000fa5f
-
SSDEEP
3072:AOqfdITVMFZklzoQmGGqbEdesG8FVIhcJ7o++vKurpW+DxDkC9EEhO4G9fQ8v9Yx:ZVMFZCkQblELPFShcJ7qkOzX8v9Yt6ef
Malware Config
Signatures
Files
-
dc2939bda8664a8d3afdd6642d8c250fa12dead2ff276b6d316e3767f2b30030.exe windows x86
812820a7fdad7a0d485d0eb50e32a7df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
CommConfigDialogW
GetProfileStringW
GetCalendarInfoW
SetProcessPriorityBoost
GetLongPathNameW
SystemTimeToFileTime
GetCurrencyFormatA
LocalCompact
CancelDeviceWakeupRequest
GetNamedPipeHandleStateA
UnhandledExceptionFilter
FoldStringA
WritePrivateProfileStructA
GetTimeZoneInformation
SetLocalTime
FoldStringW
EnumResourceTypesW
GetThreadTimes
GetPrivateProfileStringA
TlsGetValue
GetCompressedFileSizeA
GetPrivateProfileSectionNamesA
GetTimeFormatW
WaitForMultipleObjects
IsBadCodePtr
GetEnvironmentVariableW
GetDiskFreeSpaceW
GlobalUnfix
FreeEnvironmentStringsA
SetVolumeLabelW
ConvertDefaultLocale
IsBadStringPtrW
OpenFileMappingA
GetPrivateProfileIntA
IsDBCSLeadByte
GlobalDeleteAtom
winspool.drv
AdvancedSetupDialog
shell32
DoEnvironmentSubstW
user32
EnumDisplayDevicesA
DrawFrame
RegisterWindowMessageW
GetDlgItemInt
WindowFromPoint
SetScrollInfo
CopyAcceleratorTableW
DestroyWindow
GetWindowPlacement
GetNextDlgTabItem
ReplyMessage
OpenWindowStationA
UnregisterClassA
DialogBoxIndirectParamW
IsCharLowerA
GetWindow
GetMessageTime
SetWindowsHookExA
SetCaretBlinkTime
SetThreadDesktop
DrawTextExW
EnableWindow
MessageBoxExA
GetCaretPos
GetTopWindow
ToUnicode
OpenWindowStationW
GetWindowWord
GetGuiResources
ScrollWindow
IsIconic
AllowSetForegroundWindow
RegisterWindowMessageA
SetCursorPos
SetLastErrorEx
UnregisterDeviceNotification
SetCursor
WINNLSGetIMEHotkey
GetAltTabInfoA
GetCursorInfo
SetDoubleClickTime
OemKeyScan
OpenInputDesktop
CreateDesktopW
IsChild
DdeConnect
GetQueueStatus
GetClassLongW
SendMessageA
GetClassLongA
GetSystemMetrics
MsgWaitForMultipleObjects
UnloadKeyboardLayout
GetKeyNameTextW
CreateCursor
CopyImage
DdeEnableCallback
SetWindowsHookA
CloseWindowStation
GetAsyncKeyState
GetMenu
TabbedTextOutA
DestroyIcon
SetParent
AttachThreadInput
VkKeyScanExA
SetMenuItemBitmaps
CharNextExA
MsgWaitForMultipleObjectsEx
OpenDesktopW
InvalidateRgn
LoadCursorA
HideCaret
DestroyCursor
EnableScrollBar
SetCaretPos
GetScrollRange
ClipCursor
SetDlgItemTextW
CharPrevExA
GetMenuDefaultItem
MapDialogRect
IMPGetIMEW
PostThreadMessageA
DefWindowProcW
CharLowerBuffW
LoadKeyboardLayoutW
SetWindowPlacement
SetWindowPos
InsertMenuW
ShowWindow
CopyAcceleratorTableA
SetWindowLongW
GetMenuItemRect
GetUserObjectSecurity
LockWorkStation
DdeQueryNextServer
DdeInitializeA
DdeUninitialize
SetRect
SubtractRect
SystemParametersInfoA
RemoveMenu
OemToCharA
CascadeWindows
ChangeMenuA
DrawStateW
CloseClipboard
DialogBoxParamA
EnumPropsW
LoadStringW
IsDlgButtonChecked
ValidateRgn
EnableMenuItem
MonitorFromWindow
SetMenuInfo
RegisterClipboardFormatA
GetParent
OemToCharW
TrackPopupMenuEx
IsWindow
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ