Static task
static1
Behavioral task
behavioral1
Sample
d2c4a0444256688338663d298374eeadeee498a9bea2a970fc125b6ea780dedd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d2c4a0444256688338663d298374eeadeee498a9bea2a970fc125b6ea780dedd.exe
Resource
win10v2004-20220901-en
General
-
Target
d2c4a0444256688338663d298374eeadeee498a9bea2a970fc125b6ea780dedd
-
Size
609KB
-
MD5
23786b4fc89031c3f8b57be9bcb8d51a
-
SHA1
d2c806e784c85a79c35ee1cb72ae86e47692dafb
-
SHA256
d2c4a0444256688338663d298374eeadeee498a9bea2a970fc125b6ea780dedd
-
SHA512
92b7a89473e9928e70c4f9eb00f2153484ab0e8959bdb0a5e9a66242cbe7633fb996113c742668428c9a0cf10702d33358fb943a9a25aebbfd4b9ecfbbbd53cf
-
SSDEEP
12288:nb9MHGDUvEzDFC/Zgpw2Ghnx23R73cOUW1eJJdjGu:nhReIFaZgUhn4B7slQeJJdG
Malware Config
Signatures
Files
-
d2c4a0444256688338663d298374eeadeee498a9bea2a970fc125b6ea780dedd.exe windows x86
6fa9800d95749ca1a566ff0cc51bd3e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
atl
AtlAdvise
dhcpsapi
DhcpAuditLogSetParams
DhcpCreateClass
DhcpCreateClientInfo
DhcpCreateClientInfoV4
DhcpCreateOption
DhcpCreateOptionV5
DhcpCreateSubnet
DhcpDeleteClass
DhcpDeleteClientInfo
DhcpDeleteMClientInfo
DhcpDeleteMScope
DhcpDeleteServer
DhcpDeleteSubnet
DhcpDeleteSuperScopeV4
DhcpDsCleanup
DhcpDsClearHostServerEntries
DhcpDsInit
DhcpEnumClasses
DhcpEnumMScopeClients
DhcpEnumMScopeElements
DhcpEnumMScopes
DhcpEnumOptionValues
DhcpEnumOptionValuesV5
DhcpEnumOptions
DhcpEnumOptionsV5
DhcpEnumServers
DhcpEnumSubnetClients
DhcpEnumSubnetClientsV4
DhcpEnumSubnetClientsV5
DhcpEnumSubnetElements
DhcpEnumSubnetElementsV4
kernel32
AllocConsole
_lopen
GetEnvironmentVariableA
AllocConsole
DebugActiveProcess
AllocConsole
GetPrivateProfileStringA
IsBadWritePtr
GetCommandLineW
lz32
LZRead
msacm32
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMessage32
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader
advpack
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
Sections
.text Size: 31KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 266KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE