Static task
static1
Behavioral task
behavioral1
Sample
dc8fa84bac86c800888307987e17994915fe00dceae4e452f967cbaf8f7ffe94.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc8fa84bac86c800888307987e17994915fe00dceae4e452f967cbaf8f7ffe94.exe
Resource
win10v2004-20220812-en
General
-
Target
dc8fa84bac86c800888307987e17994915fe00dceae4e452f967cbaf8f7ffe94
-
Size
22KB
-
MD5
fc479b3a498a33ad9e0976b20e1f86d7
-
SHA1
da9938132470d2f1f1fae58ceb1e50adb00d9c49
-
SHA256
dc8fa84bac86c800888307987e17994915fe00dceae4e452f967cbaf8f7ffe94
-
SHA512
f0621c5babbe8241f99fb4dc2a69ddf3233325357071da6b6ea96a1f836ac2308245cc0704bb353d51ac5e3178eca4bad923a0a65a4614b5a012cb487f738382
-
SSDEEP
384:DTnPTAoNIgPS4/wmt1GMf9m6RKueFW9NvtLxxVP:Dz79N/Px/w4GO931eg93t
Malware Config
Signatures
Files
-
dc8fa84bac86c800888307987e17994915fe00dceae4e452f967cbaf8f7ffe94.exe windows x86
29c05319ba654c456d1ee9f2b84d3061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreatePipe
CreateFileA
GetModuleFileNameA
WinExec
GetTickCount
CreateDirectoryA
GetCommandLineA
GetLastError
CreateMutexA
GetCurrentThreadId
DeviceIoControl
GetVersionExA
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
MessageBoxA
SetSystemCursor
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcirt
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@PBD@Z
?cout@@3Vostream_withassign@@A
?endl@@YAAAVostream@@AAV1@@Z
Sections
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ