Static task
static1
Behavioral task
behavioral1
Sample
dd869fd51dc2ace42763d629fc8ed6caf209ddd71b41d6aedd7a7a1ab79ffb9d.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
dd869fd51dc2ace42763d629fc8ed6caf209ddd71b41d6aedd7a7a1ab79ffb9d.exe
Resource
win10v2004-20220414-en
General
-
Target
dd869fd51dc2ace42763d629fc8ed6caf209ddd71b41d6aedd7a7a1ab79ffb9d
-
Size
3.8MB
-
MD5
cf300ac61d822819800e96198b91b1c9
-
SHA1
9daa6f31bbc1d329bfb4180e33f8c97402868a5b
-
SHA256
dd869fd51dc2ace42763d629fc8ed6caf209ddd71b41d6aedd7a7a1ab79ffb9d
-
SHA512
86837965dce13c2f8da00b19806e18fde09b18913feb9ab3866c8cffb8c5cb6613a79e8c8d514e1a5a18541cc2121c60e7c3efa88ab7c20112e68ddc47d3fdc3
-
SSDEEP
98304:J8F5HgDydXRy8ozkv7uRJwxTjGFWI4CAK3pT9o8+UKdXUE6:mF5usy8ykTmJwBauCj31mNhj6
Malware Config
Signatures
Files
-
dd869fd51dc2ace42763d629fc8ed6caf209ddd71b41d6aedd7a7a1ab79ffb9d.exe windows x86
7adef453d7369a0d71b8184e02ce8e34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessIoCounters
HeapAlloc
ScrollConsoleScreenBufferW
GetCommConfig
GetVolumePathNameW
OpenProcess
GlobalAlloc
GetVolumeInformationA
GetMailslotInfo
lstrcatA
GetOverlappedResult
GetLargestConsoleWindowSize
GetProcAddress
UnmapViewOfFile
GetPrivateProfileStringA
ProcessIdToSessionId
SetFileApisToANSI
SetProcessWorkingSetSize
SetNamedPipeHandleState
SetEnvironmentVariableA
GetModuleHandleA
GetProcessAffinityMask
CreateMailslotA
lstrcpyA
ReadFile
SetEndOfFile
EnumSystemCodePagesW
GetVolumeNameForVolumeMountPointA
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineW
RaiseException
RtlUnwind
GetLastError
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
EnterCriticalSection
LeaveCriticalSection
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
LCMapStringW
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
CloseHandle
SetStdHandle
SetFilePointerEx
WriteConsoleW
ReadConsoleW
user32
GetCursorInfo
advapi32
AreAnyAccessesGranted
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.7MB - Virtual size: 35.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ