Static task
static1
Behavioral task
behavioral1
Sample
daeb3716a80f506dcefa28d790a549cb496ee2d30c1e9dd98abedfb6cc6e0734.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
daeb3716a80f506dcefa28d790a549cb496ee2d30c1e9dd98abedfb6cc6e0734.exe
Resource
win10v2004-20220812-en
General
-
Target
daeb3716a80f506dcefa28d790a549cb496ee2d30c1e9dd98abedfb6cc6e0734
-
Size
418KB
-
MD5
ccd961d0de5f1ee8da00eb66424be109
-
SHA1
12c068f5b5b8e4bc18bc13c993fd6bbf17a18991
-
SHA256
daeb3716a80f506dcefa28d790a549cb496ee2d30c1e9dd98abedfb6cc6e0734
-
SHA512
6d7c9680d4b4fda23c1d17e61dd27173dc676ac92b1dac1d52134475d7bcc5e58afe65e5ca948fdbbf02444f5d1bce92decca00a6be515ab7f18112a54d4b794
-
SSDEEP
6144:sj0FN2U1ZoPr/jhh8828ElII4werNntYFn1vlV3BfC35ymeXYJvH:1QPr7hh8wI4VvYFrZBa35y3XYhH
Malware Config
Signatures
Files
-
daeb3716a80f506dcefa28d790a549cb496ee2d30c1e9dd98abedfb6cc6e0734.exe windows x86
045f645f9045a0e24e3a250061032421
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
GetLogicalDrives
OutputDebugStringW
GetSystemDirectoryA
FindAtomA
GetNamedPipeInfo
FlushViewOfFile
WriteConsoleOutputA
FindFirstFileExW
PeekNamedPipe
MoveFileA
MoveFileExW
CreateFileMappingA
FreeEnvironmentStringsA
GetExitCodeProcess
ReadConsoleInputW
GetProfileIntA
CreateFiber
IsValidCodePage
FillConsoleOutputAttribute
SetupComm
user32
CreateIconFromResource
UnregisterClassW
IsRectEmpty
ValidateRect
GetTopWindow
SetMenuInfo
OffsetRect
SendDlgItemMessageA
CheckMenuRadioItem
EnumDisplayDevicesW
InsertMenuItemA
GetPropA
EndDeferWindowPos
FindWindowExW
GetSystemMenu
SwapMouseButton
SetWinEventHook
PeekMessageA
VkKeyScanA
GetMenuDefaultItem
SendMessageA
SystemParametersInfoA
CharUpperW
NotifyWinEvent
PeekMessageW
RegisterClassExW
IsClipboardFormatAvailable
OpenClipboard
LoadAcceleratorsA
MapVirtualKeyA
CheckMenuItem
FindWindowW
gdi32
AddFontResourceA
GetSystemPaletteUse
shell32
ShellAboutA
SHGetPathFromIDListW
SHFileOperationW
ExtractIconA
Sections
.text Size: 35KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ