Static task
static1
Behavioral task
behavioral1
Sample
df7c3ec9e5960e484e74b1350cd9545a569c50fd097b4393599a543ac7c69a13.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df7c3ec9e5960e484e74b1350cd9545a569c50fd097b4393599a543ac7c69a13.exe
Resource
win10v2004-20220901-en
General
-
Target
df7c3ec9e5960e484e74b1350cd9545a569c50fd097b4393599a543ac7c69a13
-
Size
636KB
-
MD5
2fb104650226ff7beed6599b79ccfce2
-
SHA1
5dc02ac2f1a5560551840625c841b958f76edaeb
-
SHA256
df7c3ec9e5960e484e74b1350cd9545a569c50fd097b4393599a543ac7c69a13
-
SHA512
d4d7e05c2bd6ab5313ee0ae337394a02b7067e5cf1b1fed1eb573983773bbe806f26cc08b21cc7f56fc9f35657bba750c61e5aea72738d1a2c19d4563fca0a95
-
SSDEEP
12288:ek0cbKSaoNTofqNbiXK2Pb1QKsTcHHR8xoY+hV4FK5I99LwvaCAsghIonyFgHheq:xUfYGXV1Xs5xoxVCKawvaysyweygm
Malware Config
Signatures
Files
-
df7c3ec9e5960e484e74b1350cd9545a569c50fd097b4393599a543ac7c69a13.exe windows x86
344592f2d7f6e9e6234b4eba5e13f7a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetUserDefaultLangID
CloseHandle
GlobalUnlock
GetConsoleDisplayMode
InterlockedExchange
GetTickCount
GetCommandLineA
ResumeThread
CompareFileTime
GetModuleHandleA
lstrlenA
GetConsoleCP
WaitForSingleObject
HeapReAlloc
WaitForMultipleObjects
GetVersion
GlobalSize
GetAtomNameA
HeapCreate
LoadLibraryExA
user32
GetTitleBarInfo
CloseWindow
EndPaint
ReleaseDC
GetClassNameA
GetFocus
GetParent
ShowWindow
GetWindow
CreateIcon
GetDC
wsprintfA
BeginPaint
DragDetect
DrawTextA
FrameRect
GetCursorPos
SetForegroundWindow
FillRect
rastapi
DeviceListen
AddPorts
PortClose
DeviceConnect
DeviceDone
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ