Static task
static1
Behavioral task
behavioral1
Sample
dce0f4197a1dbe5ed7f7239c59460da356cb30af56c749f238a23066eb985382.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dce0f4197a1dbe5ed7f7239c59460da356cb30af56c749f238a23066eb985382.exe
Resource
win10v2004-20220812-en
General
-
Target
dce0f4197a1dbe5ed7f7239c59460da356cb30af56c749f238a23066eb985382
-
Size
303KB
-
MD5
add9cd1a78f71e2306628256b264ad3f
-
SHA1
ae7ff2266f1972ccbefd4d48fbe54788c3f17fdf
-
SHA256
dce0f4197a1dbe5ed7f7239c59460da356cb30af56c749f238a23066eb985382
-
SHA512
7b5ab794237ec9b3b08da9c98cdba54cf438a0e5713257707a3e13ef0b89535546c39be6a844e1098b2361526e8b5d0db2acd849155796f1f78b92616cbe3a69
-
SSDEEP
6144:TrDPnPsHhCdvisSP+y9SnF40TK0FsWpcZqmms1Ivf9EsOcJwatgK:TnPnPhv+b840TK0sLqkpwJwKgK
Malware Config
Signatures
Files
-
dce0f4197a1dbe5ed7f7239c59460da356cb30af56c749f238a23066eb985382.exe windows x86
32c2d8f72d2760794cea7a40515a75cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventA
GetFileSize
lstrcpyA
InterlockedExchange
GetExitCodeProcess
GetStartupInfoW
SetConsoleTitleA
IsBadWritePtr
GetStringTypeA
HeapCreate
GetLastError
GetModuleHandleA
HeapSize
ReadFile
LoadLibraryA
SetFileTime
SetFileTime
SetFileTime
lstrcatA
LeaveCriticalSection
CloseHandle
mstscax
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
shell32
SHGetMalloc
ExtractIconA
ShellMessageBoxW
DragQueryFileA
DragAcceptFiles
SHFree
DragFinish
SHGetDiskFreeSpaceA
StrChrA
DuplicateIcon
SHGetSettings
DllUnregisterServer
ShellAboutA
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ