Static task
static1
Behavioral task
behavioral1
Sample
c379814cd06e61a6e54f2b278170552bbda90e40becf407ddd8d7f76211d75d4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c379814cd06e61a6e54f2b278170552bbda90e40becf407ddd8d7f76211d75d4.exe
Resource
win10v2004-20221111-en
General
-
Target
c379814cd06e61a6e54f2b278170552bbda90e40becf407ddd8d7f76211d75d4
-
Size
769KB
-
MD5
3d865e2ea6271eb05e2146b19de46284
-
SHA1
98919762a20c269827ef87cc11b45c5770d4e113
-
SHA256
c379814cd06e61a6e54f2b278170552bbda90e40becf407ddd8d7f76211d75d4
-
SHA512
bddaff7cd59728c409ffcbe93d2177cbb1c778346be0d38e1f2f73e782ef80ba21dc691f02832a82fa2fb73bae5e2f5bf25d9189f7773a926b49c008ea0f8d90
-
SSDEEP
24576:b2MOJBZk1p4VuNxaMqD/dP4F1Q7Sk8cs8j4:ivd0Ps/dPjSdct4
Malware Config
Signatures
Files
-
c379814cd06e61a6e54f2b278170552bbda90e40becf407ddd8d7f76211d75d4.exe windows x86
af03283be9b0d0d83d0955077e0a7a76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetFileType
RemoveDirectoryA
FindClose
Beep
GetModuleHandleA
WriteFile
CreateFileMappingW
GetTickCount
ResetEvent
CreateEventW
OpenEventA
FindClose
ReleaseMutex
lstrlenA
CreateDirectoryW
GetCommandLineA
ReleaseSemaphore
SetStdHandle
RemoveDirectoryA
HeapFree
DeleteFileA
GetDriveTypeA
WriteConsoleW
CreateFileA
user32
GetSysColor
GetClassInfoA
DestroyMenu
DispatchMessageA
GetWindowLongA
IsZoomed
IsWindow
DestroyMenu
PeekMessageA
FindWindowA
CreateIcon
MessageBoxA
DrawTextW
dmloader
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ