Static task
static1
Behavioral task
behavioral1
Sample
dc1ab78dded4df9f2e86e222776b180bfbe16ccbffcb49db534a267b06f7494e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc1ab78dded4df9f2e86e222776b180bfbe16ccbffcb49db534a267b06f7494e.exe
Resource
win10v2004-20220901-en
General
-
Target
dc1ab78dded4df9f2e86e222776b180bfbe16ccbffcb49db534a267b06f7494e
-
Size
112KB
-
MD5
ed9de281591224a21b3a37dce94ca664
-
SHA1
5f20fe2f0c003cbe2b1a4725670b20c12e5c6e7f
-
SHA256
dc1ab78dded4df9f2e86e222776b180bfbe16ccbffcb49db534a267b06f7494e
-
SHA512
4abaf17f33f743720ab8304e66ebbb640c186b17a194a4bb79473bb45f7b9eb6618ea2a1fdafd00e682099d40ac9fd5902a5ed8f15b780d1c03e10d0dba5937b
-
SSDEEP
3072:Vzdi5e3o2O2hB6lwenb+5xc5+uW20CkmNmZi2B:3qtx2ai5xc5U2R1NmZf
Malware Config
Signatures
Files
-
dc1ab78dded4df9f2e86e222776b180bfbe16ccbffcb49db534a267b06f7494e.exe windows x86
3b56ba936eafd49dea8b2fe7c46406b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetCommandLineW
GetEnvironmentStringsW
GetCurrentThread
GetVersionExA
CreateSemaphoreA
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetStdHandle
GetModuleHandleW
GetPriorityClass
CreateEventA
GetEnvironmentStrings
GetCurrentProcessId
GetTickCount
VirtualAlloc
GetCommandLineA
GetStartupInfoW
user32
GetForegroundWindow
CloseWindow
AnyPopup
GetWindowTextLengthA
GetDesktopWindow
gdi32
AbortDoc
GetTextColor
GetTextMetricsA
SetTextAlign
crypt32
CryptMsgUpdate
setupapi
SetupLogErrorA
msvcrt
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
_except_handler3
memcpy
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ