Static task
static1
Behavioral task
behavioral1
Sample
dbfcbabd95af3dee2c98d93ea34d8b036cf3060e71a22b3f79c7fad64aa75f1d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dbfcbabd95af3dee2c98d93ea34d8b036cf3060e71a22b3f79c7fad64aa75f1d.exe
Resource
win10v2004-20221111-en
General
-
Target
dbfcbabd95af3dee2c98d93ea34d8b036cf3060e71a22b3f79c7fad64aa75f1d
-
Size
125KB
-
MD5
ab17416207cde89fc2c45e806700cfa0
-
SHA1
5cbd44c53520cc632989ba6f3e865438ddb2d776
-
SHA256
dbfcbabd95af3dee2c98d93ea34d8b036cf3060e71a22b3f79c7fad64aa75f1d
-
SHA512
f2f49157d3f748401a06f386807625e3bd8d79e8f3fec470c4336f0e8bb376e19df9e1adad48c9fd9e9bedbe4bc43cfd88de1e4b0b60c542454540ffc1983b72
-
SSDEEP
1536:kyXNFR9JM78SeBcKifBQI1+hlczhE+eCqWC3MyVVw/LTK2hLV+AmqWf:bzk8SpK2qI1/hiWDyEq2hLV+AC
Malware Config
Signatures
Files
-
dbfcbabd95af3dee2c98d93ea34d8b036cf3060e71a22b3f79c7fad64aa75f1d.exe windows x86
4a407f373250cddacc223478888bdb25
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
CreateEventA
Sleep
SetEvent
ResetEvent
ReadFile
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetModuleFileNameA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLocalTime
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
CreateFileA
TerminateThread
ExitThread
GetTickCount
SetFileAttributesA
GetFileAttributesA
CloseHandle
WaitForSingleObject
GetTempPathA
FlushFileBuffers
WriteFile
SetFilePointerEx
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetModuleHandleA
FreeEnvironmentStringsA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
GetFileType
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetStdHandle
SetHandleCount
advapi32
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ws2_32
connect
inet_addr
htons
setsockopt
recv
socket
closesocket
send
gethostbyname
WSACleanup
WSAStartup
WSAGetLastError
WSACloseEvent
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ