Static task
static1
Behavioral task
behavioral1
Sample
dc18bf9c5ddeaedab192f47680505065655a0d4385f6a2d3194317c8c5b0504a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc18bf9c5ddeaedab192f47680505065655a0d4385f6a2d3194317c8c5b0504a.exe
Resource
win10v2004-20220812-en
General
-
Target
dc18bf9c5ddeaedab192f47680505065655a0d4385f6a2d3194317c8c5b0504a
-
Size
261KB
-
MD5
ed3b53b02b28991a94155eceff2e0320
-
SHA1
a331e4c43a68dd2ce72ca5520ab9f45e3ff3b016
-
SHA256
dc18bf9c5ddeaedab192f47680505065655a0d4385f6a2d3194317c8c5b0504a
-
SHA512
4ef62834990a78007463255d329aa107457fe9f232d6b5be306f4c82df15f7589acf93217da7d8988ace699f9fd4bfef125630f1fb78507fb10384ca2e88e167
-
SSDEEP
6144:LJjXeXWLpQXi+QTuQum48vP9NoKTumDg1i61YBxdIPA6l:NDeXWMBqQM9LuigU6mBxSPb
Malware Config
Signatures
Files
-
dc18bf9c5ddeaedab192f47680505065655a0d4385f6a2d3194317c8c5b0504a.exe windows x86
19ac8783992014f530e8e302befb5351
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
CharLowerBuffA
UnregisterClassA
kernel32
lstrlenW
FindResourceExA
UnhandledExceptionFilter
GetThreadLocale
GetACP
CreateDirectoryA
HeapSize
FindResourceA
LoadResource
IsDebuggerPresent
GetCurrentThreadId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
EnterCriticalSection
SizeofResource
WideCharToMultiByte
DeleteCriticalSection
LockResource
HeapReAlloc
HeapDestroy
lstrlenA
LeaveCriticalSection
HeapAlloc
RaiseException
HeapFree
GetProcessHeap
LoadLibraryW
VirtualAlloc
iassvcs
IASUninitialize
IASSetMaxNumberOfThreads
IASGetDictionary
IASRegisterComponent
qdvd
DllUnregisterServer
DllRegisterServer
Sections
.RmjN Size: 1024B - Virtual size: 25KB
IMAGE_SCN_MEM_READ
.GdugQ Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.PNUiW Size: 3KB - Virtual size: 18KB
IMAGE_SCN_MEM_READ
.HNvcRzs Size: 2KB - Virtual size: 24KB
IMAGE_SCN_MEM_READ
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.XJPGdv Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mjlpCnO Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.veGMz Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RHDhz Size: 512B - Virtual size: 189B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AHJczh Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lJuLOOf Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LAdej Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CwMiV Size: 512B - Virtual size: 157B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ