Static task
static1
Behavioral task
behavioral1
Sample
dac838ed7ce6926697a12df6428c075e21bd5b9c5d2c14e0cd946bfcb1b45c18.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
dac838ed7ce6926697a12df6428c075e21bd5b9c5d2c14e0cd946bfcb1b45c18.exe
Resource
win10v2004-20220414-en
General
-
Target
dac838ed7ce6926697a12df6428c075e21bd5b9c5d2c14e0cd946bfcb1b45c18
-
Size
86KB
-
MD5
0e8b028dd66eea3091f7f754238e25ff
-
SHA1
b035f3b57ba921511e83260bd898e0afe8b30e3d
-
SHA256
dac838ed7ce6926697a12df6428c075e21bd5b9c5d2c14e0cd946bfcb1b45c18
-
SHA512
36885e7616ba55e3bb42e5695316dd6027621c39bc8fdf25e4de1aa94dc6cfbc86092ea58a4cd6558b3653a903137dcaa6c41121f4a0c895d8144cafb3d629bb
-
SSDEEP
1536:BCa0it04VpzDUySIeUpvf3Ngvc+zEx/e8M/FTtu/OigzA1rhxxtfTMRiRFcKB:wa0it04VpzDUySvUpn3CvcOE5e8M/FJ/
Malware Config
Signatures
-
Dridex family
Files
-
dac838ed7ce6926697a12df6428c075e21bd5b9c5d2c14e0cd946bfcb1b45c18.exe windows x86
2c4a6919352f9f7ee0cfae3ed6a894eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
FreeConsole
Sleep
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ