Static task
static1
Behavioral task
behavioral1
Sample
dcf55bedc5f7c59874d67b4d25927e6ac7c276b638e74d791ee27ce23f912087.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dcf55bedc5f7c59874d67b4d25927e6ac7c276b638e74d791ee27ce23f912087.exe
Resource
win10v2004-20220812-en
General
-
Target
dcf55bedc5f7c59874d67b4d25927e6ac7c276b638e74d791ee27ce23f912087
-
Size
180KB
-
MD5
25e60dc6397ad320e74b2620eacce5f9
-
SHA1
220c821a38c42482d9f8e9804955b83ca734185d
-
SHA256
dcf55bedc5f7c59874d67b4d25927e6ac7c276b638e74d791ee27ce23f912087
-
SHA512
1dd1d55fb26a68eaeaf429a6d9cbfaf9dc4486991687922e067b2a8b75d8e1c13d220035fbd8c73bceb23ae342e209d1f672a1e91f814a61aa24cba42f7f2db4
-
SSDEEP
3072:2oxHoq9mU3OuoY9AUitUvfnbHpLYx/CoTtOzvLa9WTfFO/KCOzmLw:hHP3oVzEfbJsx/VWv+9WTQ/KCOS
Malware Config
Signatures
Files
-
dcf55bedc5f7c59874d67b4d25927e6ac7c276b638e74d791ee27ce23f912087.exe windows x86
6da6289a3c4b83599d284f8808d7df15
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualQueryEx
SetFileAttributesA
lstrlenA
MultiByteToWideChar
FindClose
GetFileAttributesA
lstrcmpA
LoadLibraryExW
CreateEventW
DeleteFileA
GetTempPathA
EnumResourceNamesW
CreateDirectoryExA
LoadLibraryW
LocalFree
GetExitCodeThread
Heap32ListNext
RemoveDirectoryA
HeapSetInformation
CreateProcessW
CopyFileW
lstrlenW
lstrcmpiW
lstrcmpiA
InterlockedCompareExchange
FindNextFileA
FindFirstFileA
WideCharToMultiByte
DeleteFileW
psapi
GetModuleBaseNameW
ole32
IIDFromString
CoCreateInstance
advapi32
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyW
RegEnumValueW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExA
RegDeleteValueW
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ