Static task
static1
Behavioral task
behavioral1
Sample
dafb9fbd4ef5b046fee44a21460ada8b5cc8079f8b84fee275a29b01097bd715.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dafb9fbd4ef5b046fee44a21460ada8b5cc8079f8b84fee275a29b01097bd715.exe
Resource
win10v2004-20220901-en
General
-
Target
dafb9fbd4ef5b046fee44a21460ada8b5cc8079f8b84fee275a29b01097bd715
-
Size
132KB
-
MD5
e20b153b8c4f0e24c7074e11eb21cd66
-
SHA1
a65c7312f81c636aeb0705339ba96e7c6e80292f
-
SHA256
dafb9fbd4ef5b046fee44a21460ada8b5cc8079f8b84fee275a29b01097bd715
-
SHA512
f3088a04072e503602403b8b9b30c81df217402585a175f9442bed5a8edb3e9d4ffb0c1651b0151c05d6c99cffbdddbd12652dac6ea8b66f68524070014c1b97
-
SSDEEP
1536:UZmuKRAzVWCakgqAQHWE/IAOGYJfo7Cv0fyUWiTJEYdYJyb:UhcEsCakgIFIAOFyYkfpvdYJ2
Malware Config
Signatures
Files
-
dafb9fbd4ef5b046fee44a21460ada8b5cc8079f8b84fee275a29b01097bd715.exe windows x86
1c15e937e962d38fd84365162f7690f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarI4FromR4
kernel32
ConvertThreadToFiber
GetModuleHandleA
ExitThread
SetThreadLocale
WriteTapemark
GlobalFindAtomW
FatalExit
GetOverlappedResult
GetComputerNameA
GetPrivateProfileStringW
lstrcpynA
FindNextVolumeMountPointA
GetDiskFreeSpaceA
EnumSystemCodePagesW
InterlockedFlushSList
WriteProfileStringW
GetCurrentThread
SetCommState
LockFileEx
WriteFile
lstrlenW
CreateFileW
SuspendThread
InitializeCriticalSection
DeleteCriticalSection
GetConsoleTitleA
setupapi
SetupGetLineTextA
msvcrt
fread
isalpha
sin
strncat
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
= Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ