Static task
static1
Behavioral task
behavioral1
Sample
db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650.exe
Resource
win10v2004-20220812-en
General
-
Target
db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650
-
Size
782KB
-
MD5
633429fee3cb57e635194b6230a7ec50
-
SHA1
f934dbe9aac544684affd75d71da8177fa2f9015
-
SHA256
db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650
-
SHA512
15fd2414a0ec1f13b3b806e160f2cd5659cec1e35d56474f9f78d509ebc6e96594edcb3db8a38e4b3e3ebaf2eb5eb25edb27faa2ba53b2e685c87f4252b13fd4
-
SSDEEP
12288:lDCACrKt/Cth2VV4ewIzbhLLaDLKSX1Q5dWSjYpADqyzJrOVKu4LySalr7vx0cwT:lI3E4xebRL7SXGWSmAT6Ku4LHal/mPFb
Malware Config
Signatures
Files
-
db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650.exe windows x86
f8b9168fa23478dcd237f91ac9d52747
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
msimg32
AlphaBlend
ole32
CreateStreamOnHGlobal
IsAccelerator
CoTaskMemFree
OleSetMenuDescriptor
OleInitialize
ProgIDFromCLSID
CoUninitialize
DoDragDrop
RevokeDragDrop
CoCreateInstance
OleGetClipboard
CoInitialize
CreateDataAdviseHolder
ReleaseStgMedium
CoTaskMemAlloc
CoRegisterClassObject
StringFromCLSID
RegisterDragDrop
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
OleUninitialize
CoGetClassObject
CoGetMalloc
OleDraw
OleSetClipboard
IsEqualGUID
ntdll
RtlInitUnicodeString
RtlAllocateHeap
RtlFreeHeap
RtlNtStatusToDosError
Sections
.text Size: 1024B - Virtual size: 730B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 776KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ