Static task
static1
Behavioral task
behavioral1
Sample
dc6d81e8897fa7a630446f358604b5b55d2006df923fde8a0d3495117e37430a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dc6d81e8897fa7a630446f358604b5b55d2006df923fde8a0d3495117e37430a.exe
Resource
win10v2004-20220901-en
General
-
Target
dc6d81e8897fa7a630446f358604b5b55d2006df923fde8a0d3495117e37430a
-
Size
76KB
-
MD5
3e139a52141b5095d8454225b2a06741
-
SHA1
cf07fd790cf04bd6fe31b370280fb6510de9b0b3
-
SHA256
dc6d81e8897fa7a630446f358604b5b55d2006df923fde8a0d3495117e37430a
-
SHA512
18abfd1d66a532bf90602a6b3a7425858df7b7021e7bd58d2edc43448b5a8ccb4ba458716abc9f10c0822d7d46d854b8a05f130d7044560f8825e8e5c2ef5b07
-
SSDEEP
1536:MXNGoSt/3TleJjulF0OrWaooVggP2qsKmxit:yGftLlq8BrPVggP2lg
Malware Config
Signatures
Files
-
dc6d81e8897fa7a630446f358604b5b55d2006df923fde8a0d3495117e37430a.exe windows x86
e5a66515e9d7ae5221dc7b1ac10810b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
FindResourceA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadResource
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetOEMCP
LockResource
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ