Static task
static1
Behavioral task
behavioral1
Sample
df70005e2b76627b322871ac5421c8d70dc34dc575d3f84817c8bff492a72b1d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df70005e2b76627b322871ac5421c8d70dc34dc575d3f84817c8bff492a72b1d.exe
Resource
win10v2004-20220812-en
General
-
Target
df70005e2b76627b322871ac5421c8d70dc34dc575d3f84817c8bff492a72b1d
-
Size
188KB
-
MD5
dbcc1c4520081b8b440a5dc5683de52e
-
SHA1
8ff871e09e0e6fb1bb800b6ecccd97407de02d0f
-
SHA256
df70005e2b76627b322871ac5421c8d70dc34dc575d3f84817c8bff492a72b1d
-
SHA512
4b85e2a65cb8b25e3797760763ce43e421681ae723e903e30f73727b8eaab4ca16ae0c3c86b4f5d31fe8c1cb03c7289106766f9db9f561b8f5f0fb357c0e3070
-
SSDEEP
3072:ozNWMKKRZYchObK91C8sV6Xmoo4LEpYOH4XFMcXqmAtc+5vuesBpn:oZuuObR8sVImcyYOSFMFZJuesB
Malware Config
Signatures
Files
-
df70005e2b76627b322871ac5421c8d70dc34dc575d3f84817c8bff492a72b1d.exe windows x86
dbbceac39f5975d959814fd9c7244aa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
lstrcatA
_lcreat
_lwrite
_lclose
ExitProcess
shell32
ShellExecuteA
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ