Static task
static1
Behavioral task
behavioral1
Sample
dc932c2c3bf2211daa0ff989f601fafe8c5efedd58d2259649cae37e5743b26e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc932c2c3bf2211daa0ff989f601fafe8c5efedd58d2259649cae37e5743b26e.exe
Resource
win10v2004-20221111-en
General
-
Target
dc932c2c3bf2211daa0ff989f601fafe8c5efedd58d2259649cae37e5743b26e
-
Size
439KB
-
MD5
872cbd7197f9852cfc3fc2bf4a33fff8
-
SHA1
5ddcaa370978dc1d71636f92d31bdaadb82c06cd
-
SHA256
dc932c2c3bf2211daa0ff989f601fafe8c5efedd58d2259649cae37e5743b26e
-
SHA512
c8791fa055bb5820ffb30e2245da9b42d3d8aedfc601a79dc47810a4e9d34f29d44fa36d1a7e674b3243abfb97aa299a9a8a598a5df18345bd7115a269c5d41a
-
SSDEEP
12288:X8/HO5cfNJ7xyZQfmw86pyAEf36V7UpauoPosIqbk:6PTxyfJ6pTV7UpauiosIqg
Malware Config
Signatures
Files
-
dc932c2c3bf2211daa0ff989f601fafe8c5efedd58d2259649cae37e5743b26e.exe windows x64
24da1d9ed58579d257d131041116a096
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
__WSAFDIsSet
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
wininet
FtpOpenFileW
psapi
EnumProcesses
userenv
LoadUserProfileW
user32
GetDC
gdi32
LineTo
comdlg32
GetSaveFileNameW
advapi32
GetAce
shell32
DragFinish
ole32
CoGetObject
oleaut32
VariantTimeToSystemTime
Sections
.MPRESS1 Size: 295KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE