Static task
static1
Behavioral task
behavioral1
Sample
dc3b40946e86a828e507078499189ca8f366a5482feb0a2edfa6c46c9c557af4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc3b40946e86a828e507078499189ca8f366a5482feb0a2edfa6c46c9c557af4.exe
Resource
win10v2004-20220812-en
General
-
Target
dc3b40946e86a828e507078499189ca8f366a5482feb0a2edfa6c46c9c557af4
-
Size
148KB
-
MD5
124dcfcf6c935560f0e580519db71abc
-
SHA1
505bc82de03c2699dc7a69d9e2ea3de992d554c6
-
SHA256
dc3b40946e86a828e507078499189ca8f366a5482feb0a2edfa6c46c9c557af4
-
SHA512
8a9ac6d825f09d2531dddaa8bb48bf7251436205122641eec7ae87133858fcdab00c0d29277857ff57600ff61a848f3ee58018c31ca10d3acb331b32bfab3f3a
-
SSDEEP
3072:aOHGfSgKcjotIgr8qJoZfwUUgYwevNeXXunaLdJvkPeggH8SHWN20468Zzd+:akgKcsLrRKZff5ZemeaLdJvOgHZO2xZz
Malware Config
Signatures
Files
-
dc3b40946e86a828e507078499189ca8f366a5482feb0a2edfa6c46c9c557af4.exe windows x86
04c9dad1102153696a563b0724502821
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA
msvcrt
strrchr
tmpnam
wcsspn
strcspn
wcstombs
Sections
.flat Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE