Static task
static1
Behavioral task
behavioral1
Sample
dcef4c185b7ee3cc63af06b2d24e4accf0b93f8bab692435c86773d210d01e11.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dcef4c185b7ee3cc63af06b2d24e4accf0b93f8bab692435c86773d210d01e11.exe
Resource
win10v2004-20221111-en
General
-
Target
dcef4c185b7ee3cc63af06b2d24e4accf0b93f8bab692435c86773d210d01e11
-
Size
138KB
-
MD5
b4f7722a6148b7e407c24832d18672b0
-
SHA1
c5b5a782e68682d58895b4129ff02ecda87262c2
-
SHA256
dcef4c185b7ee3cc63af06b2d24e4accf0b93f8bab692435c86773d210d01e11
-
SHA512
47e3cc2bfdbbdbc4d5ed9c2203d04c3b34a4031dd80644e53d8f40a6d97be5723475173c452065cf64c5d5295bb81e306eb98dcf8af3428cd329524255594c67
-
SSDEEP
3072:uFc99STx8+8iHpPQ5w3gYKgwM7xf4gZTw/I8kjnIpxYb:uEo+dep4bYKgnxf4gS/Y2s
Malware Config
Signatures
Files
-
dcef4c185b7ee3cc63af06b2d24e4accf0b93f8bab692435c86773d210d01e11.exe windows x86
20473a4524215dac7c0e8b5ae8cdfef3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetDriveTypeA
LoadLibraryA
GetThreadPriority
GetModuleFileNameA
CloseHandle
Sleep
ExitThread
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
GetCurrentThread
GetLogicalDrives
GetStartupInfoA
GetProcessTimes
TlsAlloc
IsDebuggerPresent
GetCurrentProcess
IsValidCodePage
FreeLibrary
user32
GetClassLongA
UpdateWindow
OpenIcon
RegisterClassA
GetForegroundWindow
GetWindow
IsWindowVisible
ReleaseDC
GetWindowTextA
GetWindowTextLengthA
GetActiveWindow
GetFocus
GetDC
GetWindowDC
ShowWindow
GetWindowLongA
GetSystemMetrics
CreateWindowExA
BeginPaint
advapi32
RegQueryValueExA
RegCloseKey
IsTextUnicode
RegCreateKeyExA
GetUserNameA
RegOpenKeyExA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
VerLanguageNameA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE