Static task
static1
Behavioral task
behavioral1
Sample
dbdd1d36152a099a0248d69b2b83fe999b9df0e4dafd4ffa4e1df714b71e6124.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbdd1d36152a099a0248d69b2b83fe999b9df0e4dafd4ffa4e1df714b71e6124.exe
Resource
win10v2004-20221111-en
General
-
Target
dbdd1d36152a099a0248d69b2b83fe999b9df0e4dafd4ffa4e1df714b71e6124
-
Size
132KB
-
MD5
895abfa9183179b3a3996d1777004bbf
-
SHA1
0f96c0713037dae25fb31a3ad3ef872a6370afac
-
SHA256
dbdd1d36152a099a0248d69b2b83fe999b9df0e4dafd4ffa4e1df714b71e6124
-
SHA512
f2036d60175ba111970b9d7ebf246a6e2f60f0968f758493271533d313e957227b814a87dfd68a626c9970b14d280c3e478e8b9ae3252384215e767a443f9a9b
-
SSDEEP
3072:K1BnMV5ansp73HGRBRZEhY1Y4teXtLr2KR4/:KbnsF2RBRZ82Y4tGhR
Malware Config
Signatures
Files
-
dbdd1d36152a099a0248d69b2b83fe999b9df0e4dafd4ffa4e1df714b71e6124.exe windows x86
4cca901f1e70cd51caab36d581ef1a31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
IsValidCodePage
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
lstrcpynA
lstrlenA
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ