Static task
static1
Behavioral task
behavioral1
Sample
dfb4b21d4853af094a4f0f0fe9e4d6b907ba8f71d922104a58f55ba4d6fa9378.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dfb4b21d4853af094a4f0f0fe9e4d6b907ba8f71d922104a58f55ba4d6fa9378.exe
Resource
win10v2004-20221111-en
General
-
Target
dfb4b21d4853af094a4f0f0fe9e4d6b907ba8f71d922104a58f55ba4d6fa9378
-
Size
824KB
-
MD5
52abe0f7ad11c52a9ed83e1bd500a250
-
SHA1
a3152401d075632cbd7c31f08891b16f03ab5704
-
SHA256
dfb4b21d4853af094a4f0f0fe9e4d6b907ba8f71d922104a58f55ba4d6fa9378
-
SHA512
4b7a903ad27fbc74c2a216dfa3b91e122fe54ee1eb17576533b7340a719d195b2dc44d2043732d347c2769c34efe0a804e16ca19ac336081316b80b8239d3929
-
SSDEEP
24576:8f9LUglFe7aspMT5Xguz/hku7jBiQjFvv4zSZoHA:8f9wgfDNjz/XUQxXE2h
Malware Config
Signatures
Files
-
dfb4b21d4853af094a4f0f0fe9e4d6b907ba8f71d922104a58f55ba4d6fa9378.exe windows x86
409512d7b7be0578709d5e5f303c3d2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
HeapCreate
DeleteFileA
CompareStringW
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetConsoleTitleW
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
LoadLibraryA
OpenMutexW
GetDriveTypeA
GetDriveTypeA
GetLongPathNameW
msxml6
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
Sections
.txt Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 805KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ