Static task
static1
Behavioral task
behavioral1
Sample
dbfec4e25a71151f864c2406a858342bb2610c2848bc71022af2f19448efc59a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbfec4e25a71151f864c2406a858342bb2610c2848bc71022af2f19448efc59a.exe
Resource
win10v2004-20221111-en
General
-
Target
dbfec4e25a71151f864c2406a858342bb2610c2848bc71022af2f19448efc59a
-
Size
91KB
-
MD5
f3d08b7efc8a235701cf138a88d6f5c1
-
SHA1
f793a742d3f36b7dbd7d1cbda10f5654c34c2722
-
SHA256
dbfec4e25a71151f864c2406a858342bb2610c2848bc71022af2f19448efc59a
-
SHA512
e706722682ff84c30c00699c3eaf5012429547a827597f304633eeb76c16178cfac2642a96861e12bd9d2bde842f9acb8f3d7889061e676552c2775b3d16cda4
-
SSDEEP
1536:KOCcwDwrdfl1maf5bZyQirawTCOZvcV73i3ogzVYpnxN+Rg4w2zOMVhjl5T8SA2C:KOCcJ7malEjbI+ogiQY2zOM4SDDfA/vp
Malware Config
Signatures
Files
-
dbfec4e25a71151f864c2406a858342bb2610c2848bc71022af2f19448efc59a.exe windows x86
87972779e8ad74063bede94bcd77e276
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetDateFormatA
GlobalLock
LocalFree
GetProcAddress
GetOEMCP
DeleteFileA
WaitForMultipleObjects
IsValidCodePage
GetWindowsDirectoryA
IsBadReadPtr
VirtualProtectEx
GetProcessHeap
GetModuleHandleW
GetStringTypeA
msvcrt
_initterm
__p__fmode
__getmainargs
__p___initenv
__set_app_type
free
calloc
__p__commode
_exit
__setusermatherr
_adjust_fdiv
_controlfp
_XcptFilter
_except_handler3
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE