Static task
static1
Behavioral task
behavioral1
Sample
dc6bc45915a3c3b3d2ad034b26d8b3f8dd8324b2c17a6b0cce37b95f15ad5469.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc6bc45915a3c3b3d2ad034b26d8b3f8dd8324b2c17a6b0cce37b95f15ad5469.exe
Resource
win10v2004-20220812-en
General
-
Target
dc6bc45915a3c3b3d2ad034b26d8b3f8dd8324b2c17a6b0cce37b95f15ad5469
-
Size
520KB
-
MD5
836a04126a3c7fca0e0656cb5eaac140
-
SHA1
bf34f058254d0132008bc4974a27e26a253c1f65
-
SHA256
dc6bc45915a3c3b3d2ad034b26d8b3f8dd8324b2c17a6b0cce37b95f15ad5469
-
SHA512
d63645a47bfcbf42dd2e53503eae27a695d84af0bc4b4a04e6b4ac2483c3950336a45f5dcfbc3db170be1d33f9af517468623cf8fad993eadef95d93b81ff807
-
SSDEEP
6144:SEM90PONTnN7yg1csUDUZmusapg8PIoW9IuAI:SlfNN7asLZo8Pxjub
Malware Config
Signatures
Files
-
dc6bc45915a3c3b3d2ad034b26d8b3f8dd8324b2c17a6b0cce37b95f15ad5469.exe windows x86
b63c3ef5cabcb56c1827affc4e8db076
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcessHeap
GetTickCount
VirtualAlloc
GetProcAddress
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
CreateMutexW
SetEvent
InterlockedExchange
GetModuleHandleW
Sleep
user32
LoadCursorW
EnableWindow
LoadIconW
GetDC
gdi32
GetLayout
SelectObject
GetDeviceCaps
avifil32
AVIFileExit
winmm
waveOutSetVolume
waveOutGetPosition
waveOutSetPitch
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 997B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 400KB - Virtual size: 895KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.machp Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ