Static task
static1
Behavioral task
behavioral1
Sample
dcfbab409f8eb7fc7eb062f0a77d373bd15694fcac0fd5c50a74ddefbc062ec4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dcfbab409f8eb7fc7eb062f0a77d373bd15694fcac0fd5c50a74ddefbc062ec4.exe
Resource
win10v2004-20220901-en
General
-
Target
dcfbab409f8eb7fc7eb062f0a77d373bd15694fcac0fd5c50a74ddefbc062ec4
-
Size
57KB
-
MD5
b8f8f3cd7c9262d269c1707d0e674067
-
SHA1
2946d51e9fd523b8ef8b982c6aadb7a5f10c4fd9
-
SHA256
dcfbab409f8eb7fc7eb062f0a77d373bd15694fcac0fd5c50a74ddefbc062ec4
-
SHA512
1297c37504c9531da773b7c23b4344f95cdbf43db364976a0c340417a48c2f467d3bb123f86f146af1b721a2445eb8f1f65c0e04b7673ca700b3202a5350f684
-
SSDEEP
1536:0QFeA65V6qWR0AMIAoUR+e3KOX4CflF+ccFBRp:0vHr6n0Z/3ToCflF+JFHp
Malware Config
Signatures
Files
-
dcfbab409f8eb7fc7eb062f0a77d373bd15694fcac0fd5c50a74ddefbc062ec4.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE