Static task
static1
Behavioral task
behavioral1
Sample
dc34db98203b774346b66894f522c2890618f1415c2a10aa3bb1c5cc8ba3aaa7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc34db98203b774346b66894f522c2890618f1415c2a10aa3bb1c5cc8ba3aaa7.exe
Resource
win10v2004-20220812-en
General
-
Target
dc34db98203b774346b66894f522c2890618f1415c2a10aa3bb1c5cc8ba3aaa7
-
Size
121KB
-
MD5
fb7b5a8c44543e18b875b299effe9ace
-
SHA1
aad2dc2997b07105c437333cda483d63d56ee00c
-
SHA256
dc34db98203b774346b66894f522c2890618f1415c2a10aa3bb1c5cc8ba3aaa7
-
SHA512
c43b035eb86fa3e35e693cfb7b515120a2d1680dc590e6719510aae2f54fb7ced2df5adc9fb7467781abf69e05eb11c934454c09ce3cb4c2faac28f151707c11
-
SSDEEP
3072:1K0JisRUPpzcgkUlHdHg2xSfsuw+YS545PHmHL4D:1RJ3GcgkHha5P3
Malware Config
Signatures
Files
-
dc34db98203b774346b66894f522c2890618f1415c2a10aa3bb1c5cc8ba3aaa7.exe windows x86
0ee26a19813f2cec3f229d7be394ec7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
AllocConsole
BeginUpdateResourceA
ClearCommBreak
CloseHandle
ContinueDebugEvent
CopyFileA
CreateEventA
CreateIoCompletionPort
CreateSemaphoreA
DuplicateHandle
ExitProcess
FindAtomA
FindClose
FindResourceExA
FlushInstructionCache
GetAtomNameA
GetCommConfig
GetCommandLineA
GetConsoleCursorInfo
GetDiskFreeSpaceA
GetEnvironmentVariableA
GetFileAttributesA
GetLastError
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionNamesA
GetProcAddress
GetProfileIntA
GetStartupInfoA
GetThreadPriorityBoost
GetUserDefaultLCID
GlobalFree
HeapValidate
IsBadHugeReadPtr
IsBadHugeWritePtr
LocalUnlock
PostQueuedCompletionStatus
ReadFile
ReleaseSemaphore
SetEvent
SetFileTime
SetUnhandledExceptionFilter
Sleep
WriteProcessMemory
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
strncpy
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE