Static task
static1
Behavioral task
behavioral1
Sample
Dec PI.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Dec PI.exe
Resource
win10v2004-20220812-en
General
-
Target
Dec PI.exe
-
Size
1.0MB
-
MD5
9edc58d8c466f2d273d13f57ffad3af4
-
SHA1
75835e56651e882d0f1d3e851a867fecd39da15d
-
SHA256
008f9583ae621c21d91e0ddaa4498f0310d06d52cc889558513bcc4385280689
-
SHA512
3789f9d6e65aba654c3197ae63bcc3518d5fdc228ed32a8a6fc6ac1297f1d6b904679e777987221010180a0429b9c30f9ab0dced5469a8665a4f76a5e7ad91f2
-
SSDEEP
24576:XZfeHdU8WDSjQIOH/D7kh/iKTbGBrBQMFNhPpFDeZ:XCiSlOH/nkhBTbMQENhfe
Malware Config
Signatures
Files
-
Dec PI.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 974KB - Virtual size: 973KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ