Static task
static1
Behavioral task
behavioral1
Sample
dfcff5dfab5a91a4e1a851d0db24640bbd40e8d40126d9a6a2b01522e9863360.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dfcff5dfab5a91a4e1a851d0db24640bbd40e8d40126d9a6a2b01522e9863360.exe
Resource
win10v2004-20220812-en
General
-
Target
dfcff5dfab5a91a4e1a851d0db24640bbd40e8d40126d9a6a2b01522e9863360
-
Size
37KB
-
MD5
6a877b4b05d5ab0eeef57e3f67e3a134
-
SHA1
abfc78b705f0de21da4cf8f5fb22c04ee1171842
-
SHA256
dfcff5dfab5a91a4e1a851d0db24640bbd40e8d40126d9a6a2b01522e9863360
-
SHA512
fc64cc48175cf3a357d14bbe8d407fdfdfbe13534ae5d455114fa2d1022d4a37c3a23afe5a1716f67a6dd9d988e62d373181a6d4dbf716594b9c45882a6c73c1
-
SSDEEP
768:NNWpSyNFIhok5I0A4Ce9NifIL4DRd4/fLI0Yr7Jz+5v39FYBB9GXDSM2EHIW:NeSy3Ge0A4Ce9RWxnr7JzGvtUODSMpHP
Malware Config
Signatures
Files
-
dfcff5dfab5a91a4e1a851d0db24640bbd40e8d40126d9a6a2b01522e9863360.exe windows x86
8a71d90964cfaa2b6ed7a385eaf97dda
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WinExec
lstrlenA
lstrcatA
GetProcAddress
GetModuleHandleA
GetEnvironmentVariableA
IsBadReadPtr
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
Sleep
GetFullPathNameA
CopyFileA
lstrcpyA
DeleteFileW
ExpandEnvironmentStringsA
LoadLibraryA
lstrlenW
VirtualFreeEx
CreateDirectoryA
GetSystemDirectoryA
lstrcpyW
lstrcatW
MultiByteToWideChar
GetVersionExA
GetModuleFileNameA
CreateFileMappingA
MapViewOfFile
SetLastError
UnmapViewOfFile
GetFileSize
SetFilePointer
ReadFile
LocalAlloc
CloseHandle
LocalFree
VirtualFree
VirtualAlloc
user32
CharUpperA
MessageBoxA
advapi32
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
imagehlp
CheckSumMappedFile
ntdll
NtSetSystemInformation
RtlInitUnicodeString
NtCreateFile
ZwLoadDriver
NtDeleteFile
RtlUnwind
psapi
EnumProcessModules
GetModuleBaseNameA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE