Static task
static1
Behavioral task
behavioral1
Sample
53a8cc37b2e508ca6bcc11909b1cc943dbe2e7de84289e63a24d5fd1bc368ece.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53a8cc37b2e508ca6bcc11909b1cc943dbe2e7de84289e63a24d5fd1bc368ece.exe
Resource
win10v2004-20220901-en
General
-
Target
53a8cc37b2e508ca6bcc11909b1cc943dbe2e7de84289e63a24d5fd1bc368ece
-
Size
256KB
-
MD5
2b31a0c76b14761de4490b91d63365e9
-
SHA1
87aa72a36a013bc1a3f5ab86f4b89fac9e8db6af
-
SHA256
53a8cc37b2e508ca6bcc11909b1cc943dbe2e7de84289e63a24d5fd1bc368ece
-
SHA512
15e0178fd0af7c4f3c9cf52926920d9c938091b2ad32104d191c2fd04be3810526ef83ee1ce9742e2fed62b814aac9183b782e5d68c3320df3cae18faf659a69
-
SSDEEP
6144:UcEERzWB4NLUKbbF8zwtncWHcachchchchchchchchchchc:TfnNLwzHDFCCCCCCCCCC
Malware Config
Signatures
Files
-
53a8cc37b2e508ca6bcc11909b1cc943dbe2e7de84289e63a24d5fd1bc368ece.exe windows x86
a22eb8b7b86bc498b40e551e816b3c70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dhcpcsvc
McastApiStartup
McastApiCleanup
DhcpFreeMem
kernel32
ReadConsoleA
HeapAlloc
GetDateFormatW
GetModuleHandleA
lstrcpynA
VirtualProtect
GetExitCodeProcess
WriteConsoleW
LoadLibraryA
MapViewOfFile
GetFullPathNameW
Sleep
user32
IsDialogMessageW
DialogBoxParamA
FindWindowExA
DrawStateA
DispatchMessageW
IsZoomed
GetClassLongA
wsprintfA
LoadMenuW
GetDlgItemTextW
InsertMenuA
PostMessageW
LoadBitmapA
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ