Static task
static1
Behavioral task
behavioral1
Sample
db4e4fe000172600702d98670907d37ff1e186aa5d0b57f8f16cb87e08976e84.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db4e4fe000172600702d98670907d37ff1e186aa5d0b57f8f16cb87e08976e84.exe
Resource
win10v2004-20220812-en
General
-
Target
db4e4fe000172600702d98670907d37ff1e186aa5d0b57f8f16cb87e08976e84
-
Size
132KB
-
MD5
8902ba63cca13934f61d8eadaebaa5b2
-
SHA1
7c07942995f1d2fe0d45492545f8d79ba252c4a7
-
SHA256
db4e4fe000172600702d98670907d37ff1e186aa5d0b57f8f16cb87e08976e84
-
SHA512
1ffa9e075557a9cf1461d05417ac565d6bb2aa9ec3e10ff1c5b9acd23fe1fd894ea984902d7b89bc0db7f711472940f5b2c7aa22a71a5c392308e6e138137d1d
-
SSDEEP
1536:5ZWX8JFc/DZPw0NyjwTHPUw4lmb3q2maj4iHv0tk+8pMTI64KAtWKyzPk:TJFc/OZwTvUw40TJso8tkTpM6KA4K8P
Malware Config
Signatures
Files
-
db4e4fe000172600702d98670907d37ff1e186aa5d0b57f8f16cb87e08976e84.exe windows x86
ca0b7f1b7d466c76080ac533fcac4d42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GlobalFree
GetStdHandle
GetCommandLineA
GetCPInfo
ExitThread
ReadFile
CreateDirectoryA
CopyFileW
GetComputerNameA
DeleteFileA
GetFileSize
GetConsoleMode
CopyFileA
CreateThread
Sleep
GetFileTime
GetStdHandle
GetCPInfo
DeleteFileW
WriteFile
OpenFileMappingA
FindFirstFileA
CopyFileA
GetLastError
GetConsoleMode
GlobalFree
CreateProcessA
GetFileSize
GetLastError
CreateThread
OpenFileMappingA
OpenFile
CopyFileExW
FindFirstFileA
GetConsoleMode
Sleep
GetCommandLineA
CreateDirectoryA
CopyFileA
GetFileSize
DeleteFileW
WriteFile
SetLastError
ReadConsoleA
ReadFile
CopyFileExA
CreateThread
OpenFileMappingA
OpenFile
Sleep
SetLastError
CopyFileA
GetFileTime
GetComputerNameA
GetStdHandle
GetCommandLineA
GetFileSize
GetCommandLineA
OpenFileMappingA
DeleteFileW
ExitThread
CopyFileExW
CreateThread
CopyFileExA
DeleteFileA
GetComputerNameA
CopyFileW
SetLastError
FindFirstFileA
ReadFile
GetConsoleMode
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reLOc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 8KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bss Size: 4KB - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ