Static task
static1
Behavioral task
behavioral1
Sample
debf5c62a31107bd5d7d4833af4d26ca17dec27cac00dc5342b7388bf99d3acd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
debf5c62a31107bd5d7d4833af4d26ca17dec27cac00dc5342b7388bf99d3acd.exe
Resource
win10v2004-20220812-en
General
-
Target
debf5c62a31107bd5d7d4833af4d26ca17dec27cac00dc5342b7388bf99d3acd
-
Size
140KB
-
MD5
960b0e679aa6734664c68662557d6b80
-
SHA1
e4cbf89f30bb6146d7f0143accd82044807db050
-
SHA256
debf5c62a31107bd5d7d4833af4d26ca17dec27cac00dc5342b7388bf99d3acd
-
SHA512
12b2db71db002330be229313af87e2368ae242c50e595d97c3c52efa77d080a88473f110bca95513fbb0d1fb742fcc06bce5066512d63139008c6752c7f7ea2b
-
SSDEEP
3072:PkPBJ/oMvoMelWoOCP4OcOYYvaJ5Yj4ancTiYIwBa39sPNN:MPX/qMe3RPp4qU5M6TatsPNN
Malware Config
Signatures
Files
-
debf5c62a31107bd5d7d4833af4d26ca17dec27cac00dc5342b7388bf99d3acd.exe windows x86
719455ede6dfb8f60400ff23313d9806
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
crtdll
__GetMainArgs
exit
raise
signal
gdi32
CreateSolidBrush
BitBlt
SelectObject
DeleteObject
SetTextColor
CreateCompatibleDC
DeleteDC
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
user32
LoadIconW
GetWindowRect
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 322B - Virtual size: 322B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc1 Size: 302B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE