Static task
static1
Behavioral task
behavioral1
Sample
db08001eeeac6e74398e049efb335fb3ce0f693e34e2d0cf5a283cbc4128cbc2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db08001eeeac6e74398e049efb335fb3ce0f693e34e2d0cf5a283cbc4128cbc2.exe
Resource
win10v2004-20220812-en
General
-
Target
db08001eeeac6e74398e049efb335fb3ce0f693e34e2d0cf5a283cbc4128cbc2
-
Size
100KB
-
MD5
0d340af76e835a1ed57706be085cb850
-
SHA1
8a73f56c2cfb9990a3a234a2d6942437fb7d32fc
-
SHA256
db08001eeeac6e74398e049efb335fb3ce0f693e34e2d0cf5a283cbc4128cbc2
-
SHA512
8cb0f42a6aa2cb1afcc336b9e1ca4aa8c82740ac90d0bfb7e0f2ea34028bb49a1fd0d7080beebd27d583697199c8ad2253db70cdfa21294ad3150dc989500da5
-
SSDEEP
384:+77pYjvY6Xt11WMOqKXHYRKRoYmTjvY6Xt1sziq7HDefCRdpSQXtP0PhKbv3K:9hVWPqKoEIHhM+JStPOhKby
Malware Config
Signatures
Files
-
db08001eeeac6e74398e049efb335fb3ce0f693e34e2d0cf5a283cbc4128cbc2.exe windows x86
c39b66e6fba1d4c0e922f13b81d96b90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
SetFileAttributesW
SetLastError
WriteFile
InterlockedExchange
GetCurrentProcess
HeapCreate
CopyFileA
CreateEventA
GetTimeFormatA
GetDiskFreeSpaceA
InterlockedDecrement
WriteProcessMemory
GetCurrentThreadId
GetComputerNameA
IsValidLocale
GetAtomNameA
FoldStringW
GetCurrentDirectoryA
SleepEx
LoadLibraryA
GetDateFormatW
CreateDirectoryA
upnphost
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
ServiceMain
ctl3d32
Ctl3dEnabled
Ctl3dRegister
Ctl3dUnregister
dbnmpntw
ConnectionRead
ConnectionVer
ConnectionClose
ConnectionError
ConnectionWrite
user32
DrawIcon
CreateWindowExW
SetCursorPos
GetWindowTextA
DialogBoxParamW
LoadImageW
wsprintfA
IsWindow
IsCharLowerA
DispatchMessageA
ShowWindow
PeekMessageA
CharToOemA
SetFocus
GetMessageA
GetCaretPos
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ