Static task
static1
Behavioral task
behavioral1
Sample
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7.exe
Resource
win10v2004-20220812-en
General
-
Target
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7
-
Size
17KB
-
MD5
cdcf0bed49e64ce2cb1c16080892d4a6
-
SHA1
1f51ca081ec033e500083aa528640eeff5a1d210
-
SHA256
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7
-
SHA512
a53e9c7de01100834fdf89c2308c44860ad974dbfd8e383c8e8b7735674359b6d7b6eeabca1322ade7bf4987fd3c6ad6ed415d4b6fc4f0050ca0bf2d94a3cc4c
-
SSDEEP
192:o0v8jVcS0IAw64cYY96x0qJqvDJZlbtWxwkCAAzEjPxZBHEB8P/Kndk0fvvYQivd:HgCS0iFxJqLTNtWx5CPmEBlp3fs
Malware Config
Signatures
Files
-
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7.exe windows x86
e61ae6e5efa264ee9b185f7f684ec1a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetModuleHandleA
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
lstrcatW
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
user32
LoadIconA
advapi32
RegOpenKeyExW
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aat2a Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ