Static task
static1
Behavioral task
behavioral1
Sample
db6c2014f4a842a91cd25d8adb56b538008aac23b42115da2eeedbb267b0f4ba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db6c2014f4a842a91cd25d8adb56b538008aac23b42115da2eeedbb267b0f4ba.exe
Resource
win10v2004-20221111-en
General
-
Target
db6c2014f4a842a91cd25d8adb56b538008aac23b42115da2eeedbb267b0f4ba
-
Size
256KB
-
MD5
868a9b27b1d4fa600e1c214ab9ed98eb
-
SHA1
c77bd80305540c95aa5f9f0fd8bcc85853e6b835
-
SHA256
db6c2014f4a842a91cd25d8adb56b538008aac23b42115da2eeedbb267b0f4ba
-
SHA512
8a204da259ca38bd149e92e64fa35762d70472f3b0f56b4ec66c8e214d8d204442e1bb6908b4d2f01111909684d52d90dd49cdca502ae617c94b7bd4679580ca
-
SSDEEP
6144:+eiM98s83bWceejWkITk6pfhG+Bj4HJDvFpygfoZpdbFqi:C6YbW5e6k6lb4HJDGo2zbFq
Malware Config
Signatures
Files
-
db6c2014f4a842a91cd25d8adb56b538008aac23b42115da2eeedbb267b0f4ba.exe windows x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
CODE Size: 168KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE