Static task
static1
Behavioral task
behavioral1
Sample
dfb2ce19a2e59c0cb7e0d9935872982043c7fb3bcddf0fb6628c57f0b54a99bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfb2ce19a2e59c0cb7e0d9935872982043c7fb3bcddf0fb6628c57f0b54a99bc.exe
Resource
win10v2004-20220901-en
General
-
Target
dfb2ce19a2e59c0cb7e0d9935872982043c7fb3bcddf0fb6628c57f0b54a99bc
-
Size
357KB
-
MD5
01c3cf90cff1b3b4401804f64360a4d0
-
SHA1
991d52f217441c8db9d95a390290876236eba943
-
SHA256
dfb2ce19a2e59c0cb7e0d9935872982043c7fb3bcddf0fb6628c57f0b54a99bc
-
SHA512
821f7bf51313f137e08514114082980b292ca714526afbaa4761fd6120031c723ffe4da256b13d7d73f859364e407e9f8d4b64689d330cdde3d012acd5518204
-
SSDEEP
6144:0vF1BP/+deoL87DEBvDzJn6lhtS8/HOYg1RbUB2Q88ckAm4+/MlvAVSjZN:ojBP/jowUR6T9/HOr1RbUB2Q88cVmg3z
Malware Config
Signatures
Files
-
dfb2ce19a2e59c0cb7e0d9935872982043c7fb3bcddf0fb6628c57f0b54a99bc.exe windows x86
d5b6b7a423516880d2b71491d9a34478
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
Imports
kernel32
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameW
WriteFile
HeapCreate
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapSize
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteConsoleW
CreateFileW
GetCurrentProcessId
GlobalMemoryStatusEx
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
GlobalAlloc
GetCurrentProcess
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
GetModuleHandleW
HeapFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
CloseHandle
SetUnhandledExceptionFilter
GetFileType
HeapAlloc
user32
DefWindowProcA
GetCursorPos
OpenClipboard
LoadCursorA
IsWindowVisible
DispatchMessageW
EndDialog
EmptyClipboard
ReleaseDC
CreateWindowExA
GetWindowLongA
IntersectRect
SetWindowLongA
GetDlgItemTextW
SetClipboardData
CallWindowProcA
GetNextDlgTabItem
EndPaint
ClientToScreen
SendNotifyMessageW
CloseClipboard
DestroyAcceleratorTable
SetActiveWindow
GetMessageW
RegisterClassExA
CopyImage
LoadBitmapA
GetParent
LoadIconA
GetClientRect
SetFocus
GetWindowTextLengthA
SendMessageA
GetDC
TranslateMessage
GetForegroundWindow
GetWindowTextA
SetRect
gdi32
CreatePatternBrush
GetStockObject
PatBlt
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
comdlg32
FindTextA
advapi32
LsaRemoveAccountRights
shell32
SHGetFolderPathW
SHParseDisplayName
ole32
CoInitializeEx
CoInitialize
CoInitializeSecurity
CLSIDFromString
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
psapi
GetProcessMemoryInfo
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ord6
opengl32
wglRealizeLayerPalette
wglSwapLayerBuffers
imm32
ImmAssociateContext
uxtheme
OpenThemeData
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ