Static task
static1
Behavioral task
behavioral1
Sample
dbcf45c05daafb24494d7070c0b69d5727e0b832a9bd3735ecc2e8fc6a1f739a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbcf45c05daafb24494d7070c0b69d5727e0b832a9bd3735ecc2e8fc6a1f739a.exe
Resource
win10v2004-20220812-en
General
-
Target
dbcf45c05daafb24494d7070c0b69d5727e0b832a9bd3735ecc2e8fc6a1f739a
-
Size
296KB
-
MD5
421372de036db35c2a98a714044d0030
-
SHA1
bbd09ce804d20217bbd6e32d2531a00852c14f7f
-
SHA256
dbcf45c05daafb24494d7070c0b69d5727e0b832a9bd3735ecc2e8fc6a1f739a
-
SHA512
05f09eb063d13c96ca92dd3005a9be5b7bf1fa690fcdfb9838b6e4bb479a7bdc9224806013681501abd485eea89147e55fcb3944ccca971a8ce08ef3b5223651
-
SSDEEP
6144:3OwSdqPUCe7bS37DMXymV5rz72R+dIBuIWQPU3ObmQn:3LUCSbS37gXpnrH5dIkIWAGO
Malware Config
Signatures
Files
-
dbcf45c05daafb24494d7070c0b69d5727e0b832a9bd3735ecc2e8fc6a1f739a.exe windows x86
eee2eddf39e9758ff9c793a2385851da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
LoadLibraryW
CopyFileA
GetProcessHeap
GetDriveTypeW
VirtualProtect
SetEvent
Sleep
HeapSize
AddAtomW
GetStartupInfoA
lstrcpyA
WriteConsoleW
CancelIo
HeapDestroy
DeleteFileA
GetPrivateProfileSectionW
GetFileAttributesA
WriteConsoleW
lstrlenW
WriteConsoleW
mmcndmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServer
uxtheme
GetThemeTextMetrics
GetThemeBool
CloseThemeData
SetWindowTheme
IsThemeActive
GetThemeColor
OpenThemeData
DrawThemeEdge
GetWindowTheme
GetThemeTextExtent
CloseThemeData
DrawThemeBackground
GetThemeSysSize
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE