Static task
static1
Behavioral task
behavioral1
Sample
df9731d841f285909cfd75a5a05a9aa5bda1bebc3aa61e2c118214eec678f25c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df9731d841f285909cfd75a5a05a9aa5bda1bebc3aa61e2c118214eec678f25c.exe
Resource
win10v2004-20220812-en
General
-
Target
df9731d841f285909cfd75a5a05a9aa5bda1bebc3aa61e2c118214eec678f25c
-
Size
809KB
-
MD5
0d82a1c52700de2f58207090b7faf3aa
-
SHA1
ccab9feb741944b855d94c44823bda4f4d41c09a
-
SHA256
df9731d841f285909cfd75a5a05a9aa5bda1bebc3aa61e2c118214eec678f25c
-
SHA512
b724189e4286fc0b7cfbbea57c22eb0871825bf9e18fb7221267ff65b03fe7103f9e96a93f02140e86e11bbe360d226d293b51109e670e8dacea372857bd9e5f
-
SSDEEP
12288:o2Vt38tHS9U9pNdcGGCjbF1uyuYbP4xfw7TltaEmR0FyF0wS8MuEVIT:jJ8F9Pdc2d1uMPWfMvVmKyLFMu8U
Malware Config
Signatures
Files
-
df9731d841f285909cfd75a5a05a9aa5bda1bebc3aa61e2c118214eec678f25c.exe windows x86
ff449ece83907a17b9dc8c097199a78f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
VirtualProtectEx
OpenSemaphoreA
GetModuleFileNameA
CreateFileA
GetFileSize
SetLastError
SetLocalTime
Sleep
CreateMutexA
CreateHardLinkW
CreateSemaphoreW
SetEvent
GetStartupInfoA
LoadLibraryA
SetLastError
lstrlenA
HeapSize
GetTickCount
GlobalFree
GetProcessHeap
DeleteFileA
WriteConsoleA
CreateDirectoryW
GetFileAttributesW
dmocx
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmps
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
wininet
FtpCommandW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE