Static task
static1
Behavioral task
behavioral1
Sample
dadef37c5efecd296e375067eb42cb839d77a164772d825463d97821feccbfc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dadef37c5efecd296e375067eb42cb839d77a164772d825463d97821feccbfc2.exe
Resource
win10v2004-20220812-en
General
-
Target
dadef37c5efecd296e375067eb42cb839d77a164772d825463d97821feccbfc2
-
Size
804KB
-
MD5
0d803dbf1696795d60fc30ce7f387d21
-
SHA1
a47268df77295df5ab49106867009e8e1bc512d3
-
SHA256
dadef37c5efecd296e375067eb42cb839d77a164772d825463d97821feccbfc2
-
SHA512
e0ae21de69072dc2a281e9e865afcf130f423611f1d971671c90daf1fc369a26e3c5b1e366992f4c5031786e818ebadb3341e8eba468c50f6a5ade6eb4855a0c
-
SSDEEP
12288:dBI/jT/NuCUlxBzFiDO8HmsGmyO82qjNRh4ReAFwyNiqhcA9hb0accbRecA:4MbbB5IOymrmyhjNRhaRTFbRe
Malware Config
Signatures
Files
-
dadef37c5efecd296e375067eb42cb839d77a164772d825463d97821feccbfc2.exe windows x86
e65c1f4a923b410f6e36edcacecd6527
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFileW
CreateDirectoryA
GetModuleHandleA
GetModuleFileNameA
DeleteFileW
GetDriveTypeW
InterlockedExchange
HeapDestroy
IsValidLocale
GlobalFlags
GetFileAttributesA
DeleteFileW
SetFileTime
SetFilePointer
FindAtomW
OpenMutexW
GetTickCount
OpenEventW
LeaveCriticalSection
PulseEvent
GetCurrentThreadId
VirtualProtectEx
CreateFileW
GetVolumePathNameA
GetProcessVersion
user32
GetWindowLongA
IsMenu
SetRect
GetWindowTextA
MessageBoxA
DestroyIcon
LoadCursorA
wsprintfA
SetFocus
DestroyMenu
GetWindowLongA
PeekMessageA
DispatchMessageA
dbnetlib
ConnectionClose
ConnectionError
ConnectionOpen
InitSession
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE