DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dce4feb4ee38e9998e27be78878df7282c54a80748c0fe372eb821b8f90a2b5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dce4feb4ee38e9998e27be78878df7282c54a80748c0fe372eb821b8f90a2b5e.exe
Resource
win10v2004-20220812-en
General
-
Target
dce4feb4ee38e9998e27be78878df7282c54a80748c0fe372eb821b8f90a2b5e
-
Size
67KB
-
MD5
69dd20845f2b54b25e1757048ee7ca63
-
SHA1
f2a2683c84b38efd274c803c9a28bd98a01279da
-
SHA256
dce4feb4ee38e9998e27be78878df7282c54a80748c0fe372eb821b8f90a2b5e
-
SHA512
f5c4ea54b8834e9242797a95c55cffbae3e790b1dca07164e590ffa7ccd01ca80b78b1a5d097d896341c2e7258acac528de5f7f7b27d060b707352fe55d2f665
-
SSDEEP
1536:OzEkYFaS0AMVsE2QugCXjFXuHbsy0HDj6EUy61NWu2I:OzESS0avXjebsfSEDF4
Malware Config
Signatures
Files
-
dce4feb4ee38e9998e27be78878df7282c54a80748c0fe372eb821b8f90a2b5e.exe regsvr32 windows x86
e48315d8dea4dfe3e3cdccad4033424b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessShutdownParameters
FindAtomA
WaitForDebugEvent
GetProcessAffinityMask
SystemTimeToFileTime
GetCommandLineA
ExitProcess
GetStartupInfoA
user32
GetWindowDC
GetMessageTime
TranslateAccelerator
SetPropW
CountClipboardFormats
DlgDirSelectExA
gdi32
StartDocW
FONTOBJ_vGetInfo
GetTextExtentPointI
CreateFontIndirectW
FillRgn
GetTextFaceW
SelectClipPath
AddFontResourceExA
GetGlyphOutlineWow
GdiEntry14
CreateFontIndirectW
EngUnicodeToMultiByteN
UpdateColors
CreateDiscardableBitmap
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE