Static task
static1
Behavioral task
behavioral1
Sample
dfc811f9642782638e72e6120ac9936b81cca3010410e7f7ef84007077ef00b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfc811f9642782638e72e6120ac9936b81cca3010410e7f7ef84007077ef00b2.exe
Resource
win10v2004-20221111-en
General
-
Target
dfc811f9642782638e72e6120ac9936b81cca3010410e7f7ef84007077ef00b2
-
Size
300KB
-
MD5
f309fb71003a2505b9ff91b5c5a4f9d4
-
SHA1
c5bf4879d8d9b073d906c0986cb05b74d207c4d1
-
SHA256
dfc811f9642782638e72e6120ac9936b81cca3010410e7f7ef84007077ef00b2
-
SHA512
48491efa508a409193ffa5b0822d445d54c9ac055eaa22814c079dc3471e3a6ab8ac5046b0fd9743397a4f43d3bf1a5f38e920a9384760c98207b55f8ff17aed
-
SSDEEP
6144:QqNWnX/SRkeL/O1bvEdckDCjUETVmSHpxQUbxIruNUdmFSo:QvXKt7s7DzTVmSH735e7o
Malware Config
Signatures
Files
-
dfc811f9642782638e72e6120ac9936b81cca3010410e7f7ef84007077ef00b2.exe windows x86
cc4738cfcd9775514a232a84b87623fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryA
CreateMailslotW
HeapSize
CancelIo
GetDriveTypeW
GetStdHandle
GetExitCodeThread
GetModuleHandleA
GetFileAttributesA
IsValidCodePage
MapViewOfFile
IsBadWritePtr
SetLastError
VirtualProtect
GetCommandLineA
ResetEvent
FindClose
CreateDirectoryA
FindResourceA
GetLocaleInfoA
GetProcessHeap
user32
SetFocus
DispatchMessageA
SetCursor
IsDialogMessageA
PeekMessageA
GetWindowTextW
PostMessageW
wsprintfA
LoadCursorA
GetWindowLongW
DestroyMenu
LoadImageW
GetCapture
ipsmsnap
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ