Static task
static1
Behavioral task
behavioral1
Sample
dae66cf756d40c8e23053ca96d8be5eff970e0c9345a23e2d40e25de989bc98c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dae66cf756d40c8e23053ca96d8be5eff970e0c9345a23e2d40e25de989bc98c.exe
Resource
win10v2004-20221111-en
General
-
Target
dae66cf756d40c8e23053ca96d8be5eff970e0c9345a23e2d40e25de989bc98c
-
Size
110KB
-
MD5
6320d356d4770d96bcbc3d6a49a36e73
-
SHA1
385f2703d8b02596bdec31ae54958b0a53ebacec
-
SHA256
dae66cf756d40c8e23053ca96d8be5eff970e0c9345a23e2d40e25de989bc98c
-
SHA512
170c8cf6bc9a8cc89256045f765c6ea080efb809a2865fd6a19e48d056228340f34eba0c87fd66cfb9cc1a478936c91623ecd003d9603f8ae52167227653885c
-
SSDEEP
3072:YE8dXRkgFEsKv0IonQU0Mq7/N15Tpq7rLEHC:92kjHFoQvMq7/ZTe/h
Malware Config
Signatures
Files
-
dae66cf756d40c8e23053ca96d8be5eff970e0c9345a23e2d40e25de989bc98c.exe windows x86
7371827ede848cde6b3bd91c33d26444
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
msimg32
AlphaBlend
TransparentBlt
kernel32
DeleteCriticalSection
OutputDebugStringA
GetAtomNameW
LeaveCriticalSection
CreateThread
WaitForSingleObject
LoadLibraryW
InitializeCriticalSection
IsDBCSLeadByte
ResetEvent
EnumResourceNamesA
GetProcAddress
GetTickCount
SetEvent
QueryMemoryResourceNotification
GetFullPathNameW
GetTempPathA
LoadLibraryA
EnterCriticalSection
Sleep
GetTimeZoneInformation
FileTimeToSystemTime
GetFullPathNameA
lstrcpyA
FreeLibrary
winmm
mciSendCommandA
sndPlaySoundA
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ