Static task
static1
Behavioral task
behavioral1
Sample
db5a0b980da9b13edd1a368cd52d42085aa3beb3230386b21d63ac0acb98b894.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db5a0b980da9b13edd1a368cd52d42085aa3beb3230386b21d63ac0acb98b894.exe
Resource
win10v2004-20220812-en
General
-
Target
db5a0b980da9b13edd1a368cd52d42085aa3beb3230386b21d63ac0acb98b894
-
Size
811KB
-
MD5
dd1841f2c83a059b849d883b3cf1d7be
-
SHA1
cb601235f7ef8e965176e01e306b8197bb0c0afc
-
SHA256
db5a0b980da9b13edd1a368cd52d42085aa3beb3230386b21d63ac0acb98b894
-
SHA512
7ccf3f02a49bd8fb168af045156c513c18cafa5bc64f20750186bdd8213e9cbd29c85481567d87c60bf57dab163c22c1bf2633a7b64758b8471a6289ea255943
-
SSDEEP
12288:T39nRS1YHblnpSFHKyQjct78SpQKYQOXyGpTXhmAELgWmG:1RS1kdpzyFt78SpfCPRhtY
Malware Config
Signatures
Files
-
db5a0b980da9b13edd1a368cd52d42085aa3beb3230386b21d63ac0acb98b894.exe windows x86
4fc983718269cd1ae130ed5ba79d9a8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
ReadFile
GetModuleFileNameA
GetStartupInfoA
TlsGetValue
lstrlenW
GetFileSize
CreateDirectoryW
CreateFileA
CloseHandle
GetCalendarInfoA
WriteConsoleW
GetModuleHandleA
EnterCriticalSection
GetTickCount
GlobalFree
CancelIo
Sleep
GetCommandLineW
DeleteFileA
CancelIo
RemoveDirectoryA
InitializeCriticalSection
LeaveCriticalSection
GetConsoleTitleW
user32
IsWindow
FillRect
EqualRect
GetWindowDC
wsprintfA
DispatchMessageA
IsWindowEnabled
GetSysColor
MessageBoxA
GetWindowLongA
GetWindowLongA
IsWindowVisible
PeekMessageA
cryptdlg
CertTrustInit
CertTrustCleanup
CertTrustCertPolicy
CertConfigureTrustA
advapi32
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE