Static task
static1
Behavioral task
behavioral1
Sample
dbcb816b7fe10aacbaaad07f36ec5ed788b8343efd9dd806679c12d2b1bf6a01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbcb816b7fe10aacbaaad07f36ec5ed788b8343efd9dd806679c12d2b1bf6a01.exe
Resource
win10v2004-20221111-en
General
-
Target
dbcb816b7fe10aacbaaad07f36ec5ed788b8343efd9dd806679c12d2b1bf6a01
-
Size
56KB
-
MD5
7e1a6c49c6f827e19f23dd5a93837557
-
SHA1
8296d9d49a8c098471d651f61bad84940f6d560f
-
SHA256
dbcb816b7fe10aacbaaad07f36ec5ed788b8343efd9dd806679c12d2b1bf6a01
-
SHA512
2c81a42d06b95f7a083e58146f6307ddcd424ef9a7d2220ddace487eb84f8279f87ca360a694e29e4578ff3db406e905c59e08919d4c80adcad0af7281c55043
-
SSDEEP
1536:VwF0HkWfO8ixHdjTZ6GzRnD2CdyYjJEXNCo/NWHil:V4AfGZ9z1XnJiz
Malware Config
Signatures
Files
-
dbcb816b7fe10aacbaaad07f36ec5ed788b8343efd9dd806679c12d2b1bf6a01.exe windows x86
927ffea27ff9b336fde787207e73f389
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
LoadLibraryA
MultiByteToWideChar
GetCurrentThreadId
GlobalAddAtomW
FindResourceExW
GlobalLock
CancelWaitableTimer
GlobalFree
CreateProcessW
InterlockedDecrement
WriteFile
Sleep
QueryDosDeviceW
lstrlenW
GetProcAddress
LoadLibraryW
WaitForMultipleObjects
MoveFileW
ReadProcessMemory
FindResourceW
SetThreadPriority
user32
LoadIconW
RegisterClassExW
DialogBoxParamW
SystemParametersInfoW
GetCursorPos
SetCapture
SendDlgItemMessageW
SetDlgItemTextW
OffsetRect
PostQuitMessage
InvalidateRect
GetDlgItem
GetWindowRect
CreateWindowExW
FillRect
LoadStringW
DestroyIcon
LoadCursorW
DispatchMessageW
GetWindowDC
SetWindowPos
DefWindowProcW
EndDialog
ReleaseDC
PostThreadMessageW
GetMessageW
IsWindow
gdi32
DPtoLP
CreateDCW
CreateBitmap
CreateICW
GetClipBox
CreatePen
advapi32
LookupPrivilegeValueW
RegCreateKeyExW
GetUserNameW
RegQueryValueExW
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE