Static task
static1
Behavioral task
behavioral1
Sample
ded8b1c2d33eb5bd3480a316fbd4d9d26e3d2bd697071dd1e6058f1c3ac4d552.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ded8b1c2d33eb5bd3480a316fbd4d9d26e3d2bd697071dd1e6058f1c3ac4d552.exe
Resource
win10v2004-20220812-en
General
-
Target
ded8b1c2d33eb5bd3480a316fbd4d9d26e3d2bd697071dd1e6058f1c3ac4d552
-
Size
124KB
-
MD5
2f3e02d0d001b8c562ff5edcd0172da3
-
SHA1
337d74688a7e4d400069a457e1f7b4a994ef434a
-
SHA256
ded8b1c2d33eb5bd3480a316fbd4d9d26e3d2bd697071dd1e6058f1c3ac4d552
-
SHA512
a4d15dff9c095493d13ff7544b8b4d59732ed1d64f95f1d0d15d53bb1afb6855e710bf390369967acd2bcdd9c7360ed0ce2afad08c2369696c9704cc2bcbbf28
-
SSDEEP
1536:ScT2mbRLlv978KWDvhsWm78kqE8iL0hNYMxs23ZN+9Ch:ScTXR99PCqz78fET4i2rp
Malware Config
Signatures
Files
-
ded8b1c2d33eb5bd3480a316fbd4d9d26e3d2bd697071dd1e6058f1c3ac4d552.exe windows x86
c524dcdb83f7787810c6bebd2adce85d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
SetLastError
WriteFile
CopyFileA
ReadConsoleA
DeleteFileW
CopyFileExW
GetStdHandle
GetFileSize
CopyFileW
FindFirstFileA
OpenFileMappingA
ExitThread
CopyFileW
GetFileSize
GlobalFree
GetFileTime
CopyFileExW
DeleteFileW
GetCommandLineA
GetComputerNameA
ExitThread
CreateDirectoryA
GlobalFree
SetLastError
GetStdHandle
WriteFile
CopyFileExA
GetFileTime
CopyFileW
DeleteAtom
GetCPInfo
GetComputerNameA
CopyFileA
GetFileSize
DeleteFileA
FindAtomA
DeleteFileW
CreateThread
DeleteFileW
ReadFile
CreateDirectoryA
CopyFileExW
CreateProcessA
GetComputerNameA
GetFileSize
GetCommandLineA
DeleteFileA
GlobalFree
GetCPInfo
GetStdHandle
user32
AppendMenuW
EndDialog
AlignRects
DialogBoxParamW
AppendMenuA
GetWindowTextLengthA
GetCursor
DialogBoxParamA
GetWindowTextA
GetFocus
LoadCursorA
CalcMenuBar
advapi32
RegQueryInfoKeyW
RegLoadKeyA
RegReplaceKeyA
RegEnumValueA
RegOpenKeyExW
RegEnumKeyExA
RegCreateKeyExW
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumValueW
RegQueryValueA
RegCreateKeyExA
RegGetKeySecurity
RegDeleteValueA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lidata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE