Static task
static1
Behavioral task
behavioral1
Sample
dcad93ed00ee8ae9b2da90d9c0ec02e4779d65879d4dafb7a82ebf0e41455539.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dcad93ed00ee8ae9b2da90d9c0ec02e4779d65879d4dafb7a82ebf0e41455539.exe
Resource
win10v2004-20220812-en
General
-
Target
dcad93ed00ee8ae9b2da90d9c0ec02e4779d65879d4dafb7a82ebf0e41455539
-
Size
800KB
-
MD5
f75fa5bc6381348a547769cde57f0564
-
SHA1
631bc61a4a09e79cfb77cf4f9dac2d5cd8ec9626
-
SHA256
dcad93ed00ee8ae9b2da90d9c0ec02e4779d65879d4dafb7a82ebf0e41455539
-
SHA512
a103c3ace872375ad19fdb020db49b6c870c3d45aa8a81d0aac67995186a8c1a53c18a66963459a80192ef830506c2df63b2811b9b9b93f02155ff389c60c768
-
SSDEEP
12288:6nIkDPixgk7xLITo5hNegNTtWym64aolOpCsJEIM4Y9Qtka828MwHqCxA7:wIkQqcRewZ74nwp7EIXY9aka8SwG
Malware Config
Signatures
Files
-
dcad93ed00ee8ae9b2da90d9c0ec02e4779d65879d4dafb7a82ebf0e41455539.exe windows x86
0c67729bb1ba23b97fafb051c4e7d51e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResumeThread
TlsGetValue
GetCurrentThread
GetStringTypeW
LoadLibraryW
GetPrivateProfileIntW
lstrlenA
CreateEventW
ClearCommBreak
GetFileAttributesW
DeviceIoControl
GetPrivateProfileSectionA
DeleteFileA
VirtualProtectEx
SetLastError
HeapFree
GetProcessHeap
HeapDestroy
GetDriveTypeA
DeviceIoControl
CreateMutexW
clbcatq
SetSetupSave
ComPlusMigrate
ComPlusMigrate
SetSetupSave
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
SetupOpen
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
SetupOpen
pdh
PdhAddCounterA
PdhGetLogFileSize
PdhCloseLog
PdhGetLogFileTypeA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ