Static task
static1
Behavioral task
behavioral1
Sample
dbcb7503fb869ea0f4d23c6a1ab76c3b2a8497f141d838d68b0b4c0f60261b96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dbcb7503fb869ea0f4d23c6a1ab76c3b2a8497f141d838d68b0b4c0f60261b96.exe
Resource
win10v2004-20221111-en
General
-
Target
dbcb7503fb869ea0f4d23c6a1ab76c3b2a8497f141d838d68b0b4c0f60261b96
-
Size
85KB
-
MD5
090040928bd141ea49ab312a7ebeeb49
-
SHA1
5857f2420260ae77b4a71294668c8c7cb7ab6cc0
-
SHA256
dbcb7503fb869ea0f4d23c6a1ab76c3b2a8497f141d838d68b0b4c0f60261b96
-
SHA512
f7908bf504bb29a4cbd86582f67823fdd380a55c3fb960bb0bcbd71ab7d83718e85c19bd1e556decc2efb285207102edde447e4760255b53671cf83cde5f63cc
-
SSDEEP
1536:kv/S75As09LKKGCeqJkL1AhzMo4T9lQLJ7Q:+U5FOKKGCPJpUT9lQLJ7Q
Malware Config
Signatures
Files
-
dbcb7503fb869ea0f4d23c6a1ab76c3b2a8497f141d838d68b0b4c0f60261b96.exe windows x86
0448a6f586fe977b6c21ec8a7ad8cbdb
Code Sign
b5:5d:23:d6:17:d9:53:89:d3:15:1e:db:20:d7:27:4b:2d:0e:4c:26Signer
Actual PE Digestb5:5d:23:d6:17:d9:53:89:d3:15:1e:db:20:d7:27:4b:2d:0e:4c:26Digest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
GetUserNameA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
comctl32
ImageList_SetImageCount
InitCommonControls
ImageList_ReplaceIcon
ImageList_Create
CreateToolbarEx
CreateStatusWindowA
ImageList_Destroy
gdi32
CreateFontIndirectA
SetTextColor
SetBkMode
GetDeviceCaps
DeleteObject
kernel32
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileIntA
GetSystemDirectoryA
GetTempPathA
GetVersionExA
ExitProcess
lstrlen
RestoreLastError
GlobalAlloc
GlobalLock
GetTempFileNameA
GetWindowsDirectoryA
CloseHandle
SetFilePointer
GetLastError
WriteFile
CreateFileA
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
GetCommandLineA
GetFileSize
ReadFile
GlobalUnlock
DeleteFileA
GetStringTypeW
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetFileType
GetStdHandle
LockResource
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
GetStringTypeA
LCMapStringA
FreeLibrary
HeapDestroy
GetEnvironmentVariableA
HeapCreate
GetVersion
GetStartupInfoA
GetModuleFileNameA
RtlUnwind
HeapFree
GetModuleHandleA
HeapAlloc
LCMapStringW
FlushFileBuffers
rasapi32
RasEnumEntriesA
RasGetEntryDialParamsA
RasSetEntryDialParamsA
shell32
DoEnvironmentSubstA
ShellExecuteA
user32
OpenClipboard
EmptyClipboard
GetDlgItemTextA
wsprintfA
ReleaseDC
GetCursorPos
GetDC
DefWindowProcA
GetWindowRect
GetWindowLongA
EnableMenuItem
MessageBoxA
DialogBoxParamA
CloseClipboard
SetClipboardData
ChildWindowFromPoint
GetDlgItem
LoadCursorA
SetCursor
GetSysColorBrush
EndDialog
SetDlgItemTextA
SendMessageA
GetSystemMetrics
GetSubMenu
GetMessageA
SetWindowPos
GetWindowPlacement
LoadAcceleratorsA
TranslateMessage
DispatchMessageA
TranslateAccelerator
ShowWindow
UpdateWindow
PostMessageA
RegisterClassA
GetMenu
SetWindowLongA
LoadMenuA
SetMenu
CreateWindowExA
LoadImageA
LoadIconA
GetClientRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetWindowTextA
SetFocus
wsprintfW
MoveWindow
EnableWindow
SendDlgItemMessageA
DestroyWindow
TrackPopupMenu
PostQuitMessage
comdlg32
GetSaveFileNameA
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE