Static task
static1
Behavioral task
behavioral1
Sample
dcfe4947bb1af30e17861bbc6f3a135c1585b5af57455ebba70cadfcee9c6ab5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcfe4947bb1af30e17861bbc6f3a135c1585b5af57455ebba70cadfcee9c6ab5.exe
Resource
win10v2004-20220812-en
General
-
Target
dcfe4947bb1af30e17861bbc6f3a135c1585b5af57455ebba70cadfcee9c6ab5
-
Size
109KB
-
MD5
111094f07c224a131636cc5d3084ab58
-
SHA1
2e7cf23a19efe0e10b10de3f90339e1da224f455
-
SHA256
dcfe4947bb1af30e17861bbc6f3a135c1585b5af57455ebba70cadfcee9c6ab5
-
SHA512
df7070fd97d052621e9560a525acb942e9dcfbc5c1a145e497c50c3fe271f7636ac899fa4887fad901c37d919d5ba2eb5a0821cad57fc05fef9bfe883463a114
-
SSDEEP
1536:ohC0XSgDuhR9OCHY5zHGheaNL9DHZ3muw4sHmBOPG8DPX5yzJc8TF:UCoSTTHY5zG4aNpDUuf9Y7pydjF
Malware Config
Signatures
Files
-
dcfe4947bb1af30e17861bbc6f3a135c1585b5af57455ebba70cadfcee9c6ab5.exe windows x86
3e88f0e8ccd8d511ea7eed8b6ec9e643
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uniansi
FormatMessageW
GetModuleFileNameW
lstrcpyW
LoadStringW
kernel32
GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
lstrcmpA
user32
MessageBoxW
ole32
CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_exit
_acmdln
_XcptFilter
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE