Static task
static1
Behavioral task
behavioral1
Sample
dfccb507a8339d7389fd04550affbfe0e73d84f005ae4220a6e9bd96485afb0b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dfccb507a8339d7389fd04550affbfe0e73d84f005ae4220a6e9bd96485afb0b.exe
Resource
win10v2004-20221111-en
General
-
Target
dfccb507a8339d7389fd04550affbfe0e73d84f005ae4220a6e9bd96485afb0b
-
Size
114KB
-
MD5
114ab0d0758c6b1cdf0712e99b603e1e
-
SHA1
a815a48c64dcb2fbbe22c96a54b079eb208d09ed
-
SHA256
dfccb507a8339d7389fd04550affbfe0e73d84f005ae4220a6e9bd96485afb0b
-
SHA512
12b4b5f0bcb6c652891daab140974a1d405d9a0e8908fd32d7a529abf60133819ba6ba52ce5e0a72783c58d8b612496b5366f8427cb6915ec0358a3cdcf9a3ab
-
SSDEEP
3072:HxGHWZi3HQTOUYlRFuDohh53ui4IPyb6XWb46zj8y2uGT:HxGHWBShS6jiIxX16knr
Malware Config
Signatures
Files
-
dfccb507a8339d7389fd04550affbfe0e73d84f005ae4220a6e9bd96485afb0b.exe windows x86
84ed1028d87fbcf6e96f17a2f2221e85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CancelIo
CreateDirectoryA
CreateEventA
CreateRemoteThread
DisconnectNamedPipe
ExitProcess
FindAtomA
FlushFileBuffers
GetACP
GetAtomNameA
GetCPInfo
GetCommandLineA
GetConsoleCP
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetThreadContext
GetThreadSelectorEntry
GetThreadTimes
GlobalLock
HeapAlloc
IsBadStringPtrA
LoadLibraryExA
LoadResource
LocalFlags
LocalHandle
LocalShrink
QueryPerformanceCounter
ReleaseSemaphore
RemoveDirectoryA
ResetEvent
SearchPathA
SetUnhandledExceptionFilter
SignalObjectAndWait
UnlockFile
VirtualFreeEx
VirtualProtectEx
WaitForSingleObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE