Static task
static1
Behavioral task
behavioral1
Sample
db9555849d00cd330affa530daab86d8df585ae65d237fdba9144707b66c03ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db9555849d00cd330affa530daab86d8df585ae65d237fdba9144707b66c03ff.exe
Resource
win10v2004-20221111-en
General
-
Target
db9555849d00cd330affa530daab86d8df585ae65d237fdba9144707b66c03ff
-
Size
100KB
-
MD5
6ea8f1450aed7356dd98a5ad02d60759
-
SHA1
78d2d042d0753fb063efc395a3ce7133f7d35ecb
-
SHA256
db9555849d00cd330affa530daab86d8df585ae65d237fdba9144707b66c03ff
-
SHA512
4907f7edee5ad493716404bf6ce02d95f748e628336900586ae44f6b9b2e3c433e2d000b53324955f3166daf6c0a8415fe3bd2d0c73ed32fbdc05f8dcdaa534c
-
SSDEEP
3072:d9UKEQrc0lT2mutGIZ2v5kk83f0EzQLvDU4C:AKFdNvIMvGkAfNzQLvoP
Malware Config
Signatures
Files
-
db9555849d00cd330affa530daab86d8df585ae65d237fdba9144707b66c03ff.exe windows x86
c223aa45c26fcfff83d3fe2ea117df06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetCurrentProcess
DeleteFileA
GetModuleHandleA
ReadFile
GetWindowsDirectoryA
CreateProcessA
GetModuleFileNameA
ole32
OleSetContainedObject
CoInitialize
CoUninitialize
user32
UpdateWindow
PostQuitMessage
ShowWindow
DefWindowProcA
GetSystemMetrics
MessageBoxA
TranslateMessage
LoadIconA
GetMessageA
CreateWindowExA
DestroyWindow
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
shell32
SHGetPathFromIDListA
SHGetMalloc
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ