Static task
static1
Behavioral task
behavioral1
Sample
db0d2057729ba60a238523beb11aaeee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db0d2057729ba60a238523beb11aaeee.exe
Resource
win10v2004-20220812-en
General
-
Target
db0d2057729ba60a238523beb11aaeee.exe
-
Size
18.6MB
-
MD5
db0d2057729ba60a238523beb11aaeee
-
SHA1
eac138a0700869dbf217487f748c91ac3262895b
-
SHA256
5036373ee800193e70a2d4f7175b6974316747723dd1cd08e5e862b0c58d21c4
-
SHA512
ebf3a6f398728a3b8b5e2f81c37646a149b30ea11f8e72665a206524af12f940bb408d0f7b4c2822bb5121eb3fb74691157dd3a43470d469910a4d69a404b279
-
SSDEEP
196608:dgPGdQe1m/X5rT8fQoAkeSu2KDS93IjVZ392XEA4d8632izsQhnBwxiD5wo6Osf2:jgPd8fQoPPii4jVb2Ob2iQ7xiAJ1s5
Malware Config
Signatures
Files
-
db0d2057729ba60a238523beb11aaeee.exe.exe windows x86
fa566993a7e3df14ee59c4b48f7532ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
RaiseException
ole32
OleUninitialize
user32
PostMessageA
DrawFocusRect
atl
ord47
shell32
DragQueryFileA
Shell_NotifyIconA
gdi32
GetDeviceCaps
LineTo
advapi32
CloseServiceHandle
RegOpenKeyExA
winspool.drv
ClosePrinter
OpenPrinterA
comctl32
ord17
ImageList_Destroy
oledlg
ord8
oleaut32
SafeArrayUnaccessData
LoadTypeLi
shlwapi
PathFileExistsA
winmm
midiOutUnprepareHeader
ws2_32
inet_ntoa
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 373KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 9.2MB - Virtual size: 9.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 9KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 728KB - Virtual size: 726KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE