Static task
static1
Behavioral task
behavioral1
Sample
dd605d7c05b664c78b255c23563f8cf10e835469e5ff0a68bcd7dbf432a6d396.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd605d7c05b664c78b255c23563f8cf10e835469e5ff0a68bcd7dbf432a6d396.exe
Resource
win10v2004-20220901-en
General
-
Target
dd605d7c05b664c78b255c23563f8cf10e835469e5ff0a68bcd7dbf432a6d396
-
Size
9KB
-
MD5
3b3da5dddb497008e3ead874beb11ce0
-
SHA1
3b6f3583223024a180d6da586f365fec39455aa0
-
SHA256
dd605d7c05b664c78b255c23563f8cf10e835469e5ff0a68bcd7dbf432a6d396
-
SHA512
74e36b28f97945c6d8b2529647f4d7d9c331db57484cc87432c6543b0b1e529c7579414c41eba7bc5896316a4b786f8f782b5dcf43ad154ccf2cc8ba9662c5f7
-
SSDEEP
48:icvU2ztndBA3NhIbuTjnlEoDKImC2xYTDElfY6wph0DTh+V0feiJ1T2:b5ztnpGnGoSC2xQElA6w0DTh+2xX2
Malware Config
Signatures
Files
-
dd605d7c05b664c78b255c23563f8cf10e835469e5ff0a68bcd7dbf432a6d396.exe windows x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ