Static task
static1
Behavioral task
behavioral1
Sample
dba6e0ae00ccced0ddc95cff24c2c7c447be8e3a968be97b90df306ed6a0e0b2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dba6e0ae00ccced0ddc95cff24c2c7c447be8e3a968be97b90df306ed6a0e0b2.exe
Resource
win10v2004-20220812-en
General
-
Target
dba6e0ae00ccced0ddc95cff24c2c7c447be8e3a968be97b90df306ed6a0e0b2
-
Size
311KB
-
MD5
9335b4d48241e505b33fc005e7e06be0
-
SHA1
1ec3465a1ebdff46fd7c9bbdbedcc9e574a1dae0
-
SHA256
dba6e0ae00ccced0ddc95cff24c2c7c447be8e3a968be97b90df306ed6a0e0b2
-
SHA512
c89303d9a932d81d204d826f45667db126e1cd26f7f3ae1fc3c4485490253cf8d97e62802a6a24d97ec808e86c90338b87a4da4bd68eaed4a36f51acd23b0328
-
SSDEEP
6144:IhyGLr0tQv/64J7+I5sZT0SFKvGeIDEkyl/Ba4zARtYIdJvMljCA:I3Lbq4F+I5st0Scvx5fBhzAXbr0ljCA
Malware Config
Signatures
Files
-
dba6e0ae00ccced0ddc95cff24c2c7c447be8e3a968be97b90df306ed6a0e0b2.exe windows x86
1fcf1c058d0e6652e95a8a894242a618
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryA
CloseHandle
HeapFree
GetPrivateProfileIntA
GetStdHandle
GlobalLock
GetCurrentProcess
CreateEventA
GetCurrentThread
VirtualProtectEx
CreateDirectoryW
GlobalFlags
SetLastError
GetVersionExA
GetFileAttributesW
GetStringTypeA
GetFileAttributesW
FindClose
GetModuleHandleA
DeviceIoControl
GetPrivateProfileSectionA
shell32
StrChrA
ExtractIconA
ShellAboutA
SHFree
ShellMessageBoxA
DllUnregisterServer
DllUnregisterServer
DuplicateIcon
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetSettings
SHGetMalloc
ntmarta
AccConvertAclToAccess
AccGetExplicitEntries
AccFreeIndexArray
AccConvertSDToAccess
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ