dfe31e64464595cefc7915a5dfbe700b434f3ecccf8033f913d0d87029efec08 | Triage

Submit
Reports

Overview

overview

Static

static

dfe31e6446...08.exe

windows7-x64

dfe31e6446...08.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

dfe31e64464595cefc7915a5dfbe700b434f3ecccf8033f913d0d87029efec08.exe

Resource

win7-20220812-en

evasion persistence

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

dfe31e64464595cefc7915a5dfbe700b434f3ecccf8033f913d0d87029efec08.exe

Resource

win10v2004-20220812-en

evasion persistence

windows10-2004-x64

10 signatures

150 seconds

General

Target

dfe31e64464595cefc7915a5dfbe700b434f3ecccf8033f913d0d87029efec08
Size

224KB
MD5

97d9b62252924a65c4c0c3e956737b27
SHA1

033f602685338f18ae21d3d92450ba2c2251f274
SHA256

dfe31e64464595cefc7915a5dfbe700b434f3ecccf8033f913d0d87029efec08
SHA512

3a5b0cda3a873e28b6959eab68c2b55e0a3d83ebcad3b24b45d4c60fbbdd73b31c4a4cbb91be0b8eec53e458161c7003ad271131d2f71f576c1c0af584243ff3
SSDEEP

3072:YtkEoAWF4ZCD4OnYQqD84uiZSDMKdoWAx0NFZCSgMd3u43mb9gBBTsi:YtkEoAM4iYQqA4uoWJ8SgMd3u43mZg9

Score

N/A

Malware Config

Signatures

Files

dfe31e64464595cefc7915a5dfbe700b434f3ecccf8033f913d0d87029efec08
.exe windows x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.