Static task
static1
Behavioral task
behavioral1
Sample
dc7babde5d20073feec8c1362c5a7b0bc249b30b2e3e20e1bbd8fb7faad26634.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc7babde5d20073feec8c1362c5a7b0bc249b30b2e3e20e1bbd8fb7faad26634.exe
Resource
win10v2004-20220812-en
General
-
Target
dc7babde5d20073feec8c1362c5a7b0bc249b30b2e3e20e1bbd8fb7faad26634
-
Size
175KB
-
MD5
be3c3f5bd72aa3482aed93d95f4bf680
-
SHA1
382a3100b191607a29bc81b73716f6a3ef3ce927
-
SHA256
dc7babde5d20073feec8c1362c5a7b0bc249b30b2e3e20e1bbd8fb7faad26634
-
SHA512
722c5feb01d75fe93574c94b664679a9ba8584c59b289fb5f873c24d5a0af465319ad5eba082b95600208baab958b65b29db9571a54ba59f82ca3045d1a78670
-
SSDEEP
3072:DYgdTZ+KmaiWYby7bOIJipfxlUNiJkU5:D1RNiWY4bOBfxlwCk
Malware Config
Signatures
Files
-
dc7babde5d20073feec8c1362c5a7b0bc249b30b2e3e20e1bbd8fb7faad26634.exe windows x86
505ad792ceb71225e48c8c507ca27b37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
ExitThread
Sleep
ReadFile
PeekNamedPipe
WriteFile
CreatePipe
DisconnectNamedPipe
TerminateProcess
WaitForMultipleObjects
TerminateThread
CreateThread
GetStdHandle
FreeConsole
SetEndOfFile
GetNumberOfConsoleInputEvents
PeekConsoleInputA
SetConsoleMode
ReadConsoleInputA
GetTimeZoneInformation
CreateFileA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetLocaleInfoW
HeapSize
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
MultiByteToWideChar
CompareStringA
IsValidCodePage
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
ExitProcess
Beep
RtlUnwind
InterlockedExchange
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
DeleteCriticalSection
FatalAppExitA
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetProcessHeap
wsock32
__WSAFDIsSet
select
listen
getsockname
recvfrom
accept
WSASetLastError
socket
setsockopt
bind
connect
htons
ntohs
getservbyname
ioctlsocket
gethostbyname
inet_addr
gethostbyaddr
WSAGetLastError
WSAStartup
WSACleanup
shutdown
closesocket
recv
send
getservbyport
shell32
ShellExecuteA
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE