Static task
static1
Behavioral task
behavioral1
Sample
db414939202d401c1b1095f8f9f56b0893a48b03297cf09409901bbfe4da6f1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db414939202d401c1b1095f8f9f56b0893a48b03297cf09409901bbfe4da6f1f.exe
Resource
win10v2004-20220901-en
General
-
Target
db414939202d401c1b1095f8f9f56b0893a48b03297cf09409901bbfe4da6f1f
-
Size
193KB
-
MD5
7c3c9168bcf2a76f7a54b5c340855242
-
SHA1
397bf85b0f061d186e0f54d6845efc2837f75055
-
SHA256
db414939202d401c1b1095f8f9f56b0893a48b03297cf09409901bbfe4da6f1f
-
SHA512
a0bdc6d4b7e42f696723f47b2398fdba9c9a7b0dc8e552bfda019ca91111730d4f8ba704087f9484831130b091a811223ec30be9dc6a9e82ff134b0b29310e9b
-
SSDEEP
3072:DhcfREykNwnEustkUgKBcHePpYC1Tve5Ky6toerBFWKVkuqYwJhkaCfC7zAHrotB:DcKykD+N+PCCs5KyReOIwGfC7z4r5O
Malware Config
Signatures
Files
-
db414939202d401c1b1095f8f9f56b0893a48b03297cf09409901bbfe4da6f1f.exe windows x86
9641eff1c733d6d743501ccf7a9fc81c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyA
kernel32
GetModuleHandleA
IsBadReadPtr
GetCommandLineW
VirtualAllocEx
GetACP
lstrlenW
ExitProcess
GetProcAddress
LoadLibraryA
GetStdHandle
GetFullPathNameA
ExitThread
GetLastError
GetOEMCP
WaitForSingleObject
GetCommandLineA
msvcrt
strcmp
time
strncmp
abs
exp
tan
malloc
wcsncmp
version
GetFileVersionInfoA
VerQueryValueA
VerInstallFileA
comctl32
ImageList_Read
ImageList_Create
ImageList_DrawEx
ImageList_Add
ImageList_Remove
ImageList_GetBkColor
ImageList_Draw
ImageList_Write
ImageList_Destroy
comdlg32
ChooseColorA
GetSaveFileNameA
GetFileTitleA
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ