Static task
static1
Behavioral task
behavioral1
Sample
db90d616254821d6fa674adfc32fecb9062fafbbf766744b5404236a1f028cee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db90d616254821d6fa674adfc32fecb9062fafbbf766744b5404236a1f028cee.exe
Resource
win10v2004-20220812-en
General
-
Target
db90d616254821d6fa674adfc32fecb9062fafbbf766744b5404236a1f028cee
-
Size
371KB
-
MD5
663b59ebcb0982f5773bd2b1e07ccdb0
-
SHA1
449b155007094fd16dac87cfaea6c98e7cb09b95
-
SHA256
db90d616254821d6fa674adfc32fecb9062fafbbf766744b5404236a1f028cee
-
SHA512
81c36d4e4f7f6b448df7db04096855273a34a08ae2557d9004941fd25c7f34b6b0a56d9fc88bcf21e213c256d1b05703523de5d7985cc7b58adc3d529f7896f3
-
SSDEEP
6144:pfUe6W+C71VFvBMEblyI+c3aY2ysYTlRUhHP5pnjgB0+y2ncwSsRMr75T1DnkwN:pfUfCJV9blH2nvHP5VV+dSsyx5z
Malware Config
Signatures
Files
-
db90d616254821d6fa674adfc32fecb9062fafbbf766744b5404236a1f028cee.exe windows x86
5889801be72d31babfbd0b1b3cf8fc76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CredFree
dhcpcsvc
DhcpUndoRequestParams
kernel32
RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess
user32
GetMessageA
RegisterClassA
ole32
StgOpenStorage
Sections
.edata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ