Static task
static1
Behavioral task
behavioral1
Sample
db12de84b816cac8551a3bc26d118252588b604e3c5ed9d732361fb87ce616cf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db12de84b816cac8551a3bc26d118252588b604e3c5ed9d732361fb87ce616cf.exe
Resource
win10v2004-20221111-en
General
-
Target
db12de84b816cac8551a3bc26d118252588b604e3c5ed9d732361fb87ce616cf
-
Size
12KB
-
MD5
69a7f16e6609e5587629c131b18c7b16
-
SHA1
4ea10b689f8b315477b7245c5aa879eee98f507c
-
SHA256
db12de84b816cac8551a3bc26d118252588b604e3c5ed9d732361fb87ce616cf
-
SHA512
30ff846b3dfac32fe3b48f7cb97cf3c9d3ac03a8035d4ce3b86f003ea5b089ead1959a97ade31fbcc5d887a66c1285b46982156f2665653c1acca9c17d76ff91
-
SSDEEP
192:AqhQBh+HrYX9naGX4FriMK0SOTBStusksqte2ve7436EZ9qgT7koUPm6NESZLeo2:AqhQBhc+9naG6rtias2+ClZ9qgMoELd2
Malware Config
Signatures
Files
-
db12de84b816cac8551a3bc26d118252588b604e3c5ed9d732361fb87ce616cf.exe windows x86
1910114a0d07917adf2ab1498c49aee7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMutexW
GetProcAddress
lstrcatA
GetModuleHandleW
user32
CharUpperBuffA
CharLowerBuffA
Sections
N Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
M Size: 1024B - Virtual size: 655B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
v Size: 512B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
q Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
9 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v Size: 324KB - Virtual size: 324KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE