Static task
static1
Behavioral task
behavioral1
Sample
db9d7ee5d00ddfbcd9e2a66a826f4902244c41f19d287346c57decd35e59e564.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db9d7ee5d00ddfbcd9e2a66a826f4902244c41f19d287346c57decd35e59e564.exe
Resource
win10v2004-20220812-en
General
-
Target
db9d7ee5d00ddfbcd9e2a66a826f4902244c41f19d287346c57decd35e59e564
-
Size
421KB
-
MD5
0ea2c529391776f05576c5725c39e781
-
SHA1
6ee4f9d69a79a99a2ad1d2c65d4fb94951ca8df3
-
SHA256
db9d7ee5d00ddfbcd9e2a66a826f4902244c41f19d287346c57decd35e59e564
-
SHA512
0d4263962ec2644972d13ef2e10f330accf01e3ebffd2588482d6d7981338fa723a7f7234196f4a2c147b8ccb6e20a6e8f6056daaf0441ab2a51c33a38e591fe
-
SSDEEP
3072:cJbBbtcp8QhJ+eK285+NydoLOewc/8ISDtn4US:cXbU8QLEtANydoCTVWp
Malware Config
Signatures
Files
-
db9d7ee5d00ddfbcd9e2a66a826f4902244c41f19d287346c57decd35e59e564.exe windows x86
423ff732c087c9592d3e0562b75df552
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
FindFirstFileA
ReadProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
FindClose
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9a8n Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahmsmrv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE