Static task
static1
Behavioral task
behavioral1
Sample
433f31f0b221df4bf0b987b18c6cea1b1b40241fa9ee5c51a9f85134db10b923.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
433f31f0b221df4bf0b987b18c6cea1b1b40241fa9ee5c51a9f85134db10b923.exe
Resource
win10v2004-20221111-en
General
-
Target
433f31f0b221df4bf0b987b18c6cea1b1b40241fa9ee5c51a9f85134db10b923
-
Size
609KB
-
MD5
ad093a827e20d9196dadfb762a7b203e
-
SHA1
a8fa3d7c1df8270b4d6c911eaffc486fbe788bfb
-
SHA256
433f31f0b221df4bf0b987b18c6cea1b1b40241fa9ee5c51a9f85134db10b923
-
SHA512
bb44edc797b084c2b213580a8bb3dd7fec7cb91c81237aaf5723a693c981db496ee71b0932c30bf224c99f2938cf52f3092d496a1a63a2991e1e5ef957f12038
-
SSDEEP
12288:BuPxtOsNDILFVvOhKcNCnqN1yyUM86aEcdRY8ee6Iaon:uVwVmh8nMBMEc/YULaO
Malware Config
Signatures
Files
-
433f31f0b221df4bf0b987b18c6cea1b1b40241fa9ee5c51a9f85134db10b923.exe windows x86
65d0247b6d6185a6b3e736253cb92bea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
atl
AtlAdvise
dhcpsapi
DhcpAuditLogSetParams
DhcpCreateClass
DhcpCreateClientInfo
DhcpCreateClientInfoV4
DhcpCreateOption
DhcpCreateOptionV5
DhcpCreateSubnet
DhcpDeleteClass
DhcpDeleteClientInfo
DhcpDeleteMClientInfo
DhcpDeleteMScope
DhcpDeleteServer
DhcpDeleteSubnet
DhcpDeleteSuperScopeV4
DhcpDsCleanup
DhcpDsClearHostServerEntries
DhcpDsInit
DhcpEnumClasses
DhcpEnumMScopeClients
DhcpEnumMScopeElements
DhcpEnumMScopes
DhcpEnumOptionValues
DhcpEnumOptionValuesV5
DhcpEnumOptions
DhcpEnumOptionsV5
DhcpEnumServers
DhcpEnumSubnetClients
DhcpEnumSubnetClientsV4
DhcpEnumSubnetClientsV5
DhcpEnumSubnetElements
DhcpEnumSubnetElementsV4
kernel32
AllocConsole
CreateFileA
GetWindowsDirectoryA
AllocConsole
DebugBreakProcess
AllocConsole
GetPrivateProfileStringA
IsBadWritePtr
GetCommandLineW
lz32
LZRead
msacm32
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMessage32
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader
advpack
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
Sections
.text Size: 31KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 266KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE