Static task
static1
Behavioral task
behavioral1
Sample
dbb3b0f3cf4be5ab3367cd86fad3891e43a074d64b8691b3152b6891acb22707.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dbb3b0f3cf4be5ab3367cd86fad3891e43a074d64b8691b3152b6891acb22707.exe
Resource
win10v2004-20220812-en
General
-
Target
dbb3b0f3cf4be5ab3367cd86fad3891e43a074d64b8691b3152b6891acb22707
-
Size
46KB
-
MD5
f9002a0fb0c308dc36add5894e77f2e3
-
SHA1
87073579eee8ea24a1341d08ac36a6cc8a68eb52
-
SHA256
dbb3b0f3cf4be5ab3367cd86fad3891e43a074d64b8691b3152b6891acb22707
-
SHA512
eae5ebe94037af94a7451c2d72a2fe96697e865ac112b8a1fde0b61ee34f75a44e2a697cfd3f6ccb63f17b999e0765f6ca62ae4aea8816c8a9be30bb59a19b0a
-
SSDEEP
768:GL0L2xnu9sBw1JtLSqD3Nkwjy18LSzD3Nhwjy1:G+9sBw1JhSa3r2eSH3E2
Malware Config
Signatures
Files
-
dbb3b0f3cf4be5ab3367cd86fad3891e43a074d64b8691b3152b6891acb22707.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
putos Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
todos Size: - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
los Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
anti Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@irus Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE