Static task
static1
Behavioral task
behavioral1
Sample
dcda9e57e30101668bdebe4b607b3c8d5ff8901d3fba0b975ea7b21f432de4e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcda9e57e30101668bdebe4b607b3c8d5ff8901d3fba0b975ea7b21f432de4e9.exe
Resource
win10v2004-20220812-en
General
-
Target
dcda9e57e30101668bdebe4b607b3c8d5ff8901d3fba0b975ea7b21f432de4e9
-
Size
240KB
-
MD5
90486929e6bf62dafea0c707e59a7d76
-
SHA1
14409d080e440a43c1aa3329557f04436f01373d
-
SHA256
dcda9e57e30101668bdebe4b607b3c8d5ff8901d3fba0b975ea7b21f432de4e9
-
SHA512
d3a70159cf7f909ffee911cc0d497fa6129b3c668321d6f3e3867078a33239b0fcc38bb166c4f7ea8e2013df8502697af00f8f7e44f8525293c047063006a5f4
-
SSDEEP
6144:bbUgeeNMPaZRupn+aZGVXpEqI2JX6gAy/Aw2:bbPEc8B+XLEqIeX6gAy/m
Malware Config
Signatures
Files
-
dcda9e57e30101668bdebe4b607b3c8d5ff8901d3fba0b975ea7b21f432de4e9.exe windows x86
33b27d9ac714deb23ac756920270d3a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetFileType
GetEnvironmentVariableA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
ReadFile
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetFilePointer
CreateFileA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetEndOfFile
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE