Static task
static1
Behavioral task
behavioral1
Sample
dc67f1ec60a0d237784e973a54a7c1c700e5c69c5598f4ce3a507f0654d8e94b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc67f1ec60a0d237784e973a54a7c1c700e5c69c5598f4ce3a507f0654d8e94b.exe
Resource
win10v2004-20220812-en
General
-
Target
dc67f1ec60a0d237784e973a54a7c1c700e5c69c5598f4ce3a507f0654d8e94b
-
Size
871KB
-
MD5
1daf49a503c2ca80eb95d24b8466c069
-
SHA1
de860fcae3c14cc975e4b8bb78824b31f1d66f81
-
SHA256
dc67f1ec60a0d237784e973a54a7c1c700e5c69c5598f4ce3a507f0654d8e94b
-
SHA512
c16b35b8aa70d6d20dd4d4e47415e3985ec8523c1e96b2bbe34804606cf74825467998b512b2cfe609024754119a0f32872e810d2f740ba1fd948f18844f8241
-
SSDEEP
12288:WjVlTwAjMGj7Ak7CJM0gNeW3nB0pCKMdvlg4sJ4vYwKv:WjVHAqeiVXduVJ+
Malware Config
Signatures
Files
-
dc67f1ec60a0d237784e973a54a7c1c700e5c69c5598f4ce3a507f0654d8e94b.exe windows x86
f25c4a46ec0c12acbc3afbaffe685366
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CreateFileMappingA
GetModuleHandleA
GetDriveTypeA
IsBadStringPtrA
GetStartupInfoA
PulseEvent
SuspendThread
ReleaseMutex
DeviceIoControl
lstrlenA
HeapCreate
GetModuleFileNameA
TlsGetValue
CancelIo
DeleteFileA
TlsAlloc
CreateFileA
IsDebuggerPresent
ResumeThread
user32
DestroyMenu
CallWindowProcW
IsWindow
IsZoomed
GetIconInfo
DrawTextW
DispatchMessageA
GetWindowLongA
FindWindowW
LoadImageA
DispatchMessageA
DestroyWindow
PeekMessageA
amstream
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
cryptui
LocalEnroll
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 863KB - Virtual size: 862KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ