Static task
static1
Behavioral task
behavioral1
Sample
dea9d4af605c89ddd1a427ee3cf23df63d186edaf7adb86e9cf4554978fcf1db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dea9d4af605c89ddd1a427ee3cf23df63d186edaf7adb86e9cf4554978fcf1db.exe
Resource
win10v2004-20220812-en
General
-
Target
dea9d4af605c89ddd1a427ee3cf23df63d186edaf7adb86e9cf4554978fcf1db
-
Size
24KB
-
MD5
0ab83d937062faf4ace46033c8e3a407
-
SHA1
0a31cd94288a225be2182675faecc81ed6891927
-
SHA256
dea9d4af605c89ddd1a427ee3cf23df63d186edaf7adb86e9cf4554978fcf1db
-
SHA512
337a28f46b69c1bf9b8a0568890833798268b187a4f5e25426a7e2e02ea8be454d5e462e9d19faedb68915d6fb7184ee07c523c8d6c410f22ad0ddffc644ac55
-
SSDEEP
192:b/OORMqUTr6hPTcVGoP4oynJ/XhkVJIZMP0:qOCqUH6hPG4X/XhkDIZQ
Malware Config
Signatures
Files
-
dea9d4af605c89ddd1a427ee3cf23df63d186edaf7adb86e9cf4554978fcf1db.exe windows x86
bb0227b4df511c9ac712e011148c065b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2915
ord537
ord535
ord540
ord2818
ord2764
ord858
ord800
ord4204
ord6877
msvcrt
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_mbscmp
__CxxFrameHandler
strrchr
_adjust_fdiv
kernel32
MoveFileExA
CopyFileA
Sleep
GetModuleFileNameA
WinExec
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
VirtualProtect
GetLastError
CreateMutexA
TerminateProcess
urlmon
URLDownloadToFileA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ