Static task
static1
Behavioral task
behavioral1
Sample
db1ac06bbbed41e3635ee7069aad5082b7ced8dbe1f09547a0f5f0d345656de0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db1ac06bbbed41e3635ee7069aad5082b7ced8dbe1f09547a0f5f0d345656de0.exe
Resource
win10v2004-20220812-en
General
-
Target
db1ac06bbbed41e3635ee7069aad5082b7ced8dbe1f09547a0f5f0d345656de0
-
Size
11.7MB
-
MD5
22d5f986c00539600b0d97116cbbb92e
-
SHA1
7715ceaf145571fa569ccee00e7f7144433dd625
-
SHA256
db1ac06bbbed41e3635ee7069aad5082b7ced8dbe1f09547a0f5f0d345656de0
-
SHA512
7b58ffa39e8596d31179c6d782d6e5b8897eef6651217b7d2ecf3245d8c68940eeedbdbc47a2abb91752260672b4dba7be69a907f71ff093ab909a39a24e09d0
-
SSDEEP
49152:rUb6aWB0hM0GxAD/oZU8G7Ce4TNY/MvyqOY3q2V0rE:rUGaWBCf40gpG7C1NLvllv3
Malware Config
Signatures
Files
-
db1ac06bbbed41e3635ee7069aad5082b7ced8dbe1f09547a0f5f0d345656de0.exe windows x86
558c4a3d407d7bb467530b4bc448a7de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetFileAttributesA
SetConsoleMode
CreateSemaphoreA
GetBinaryTypeA
TerminateProcess
GetBinaryTypeW
CompareStringW
GetACP
IsBadStringPtrA
GetTempPathW
LCMapStringA
GetConsoleOutputCP
VerifyVersionInfoW
GetStdHandle
FindFirstFileA
GetProcAddress
GetProcessVersion
CreateSemaphoreW
GetFileType
GetModuleHandleA
CompareStringA
GetCurrentThreadId
LocalSize
GetCurrentProcessId
GetPrivateProfileSectionW
CloseHandle
GetSystemInfo
VirtualProtect
FlushFileBuffers
LCMapStringW
Sleep
GetStringTypeA
HeapSize
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
SetStdHandle
GetCPInfo
GetOEMCP
LoadLibraryA
WideCharToMultiByte
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
SetFilePointer
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetLocaleInfoW
GetCurrencyFormatW
EnumTimeFormatsW
GetDateFormatA
GetCurrencyFormatA
EscapeCommFunction
IsBadReadPtr
SleepEx
SetCommBreak
OpenSemaphoreA
FlushConsoleInputBuffer
SetConsoleActiveScreenBuffer
GetCurrentProcess
GetLocaleInfoA
IsBadStringPtrW
GetDateFormatW
GetCommandLineW
GetStringTypeW
ExitProcess
GetEnvironmentStrings
MultiByteToWideChar
HeapFree
HeapAlloc
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
user32
SetWindowPlacement
GetMessageA
SetTimer
SetActiveWindow
MapDialogRect
SendDlgItemMessageA
SetKeyboardState
SetCapture
MsgWaitForMultipleObjects
SetForegroundWindow
LoadIconA
MessageBoxIndirectA
SetFocus
SendMessageA
DrawEdge
ShowCaret
RegisterWindowMessageA
BeginPaint
GetDC
GetQueueStatus
ShowCursor
GetKeyboardState
GetForegroundWindow
GetWindowTextA
RegisterClipboardFormatA
InvalidateRect
GetClipboardData
EmptyClipboard
GetDlgItem
DefWindowProcA
GetCursorPos
CheckDlgButton
IsDlgButtonChecked
IsWindow
PostMessageA
DispatchMessageA
UpdateWindow
LoadCursorA
SetCursor
gdi32
TranslateCharsetInfo
GetTextExtentPoint32A
LineTo
SetTextColor
GetCharacterPlacementW
DeleteDC
CreateFontA
GetDeviceCaps
SetBkColor
SetPixel
Rectangle
GetCharWidth32W
GetCharABCWidthsFloatA
Polyline
GetTextMetricsA
GetPixel
GetObjectA
MoveToEx
shell32
CommandLineToArgvW
Sections
.text Size: 488KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 360KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ