Static task
static1
Behavioral task
behavioral1
Sample
0ddd3eaa7b59ed5bd3a335d9115e70b008e0f5598f16101a064ce9ebf60eea9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ddd3eaa7b59ed5bd3a335d9115e70b008e0f5598f16101a064ce9ebf60eea9c.exe
Resource
win10v2004-20220812-en
General
-
Target
0ddd3eaa7b59ed5bd3a335d9115e70b008e0f5598f16101a064ce9ebf60eea9c
-
Size
125KB
-
MD5
6ed4c4123f0022100db87e23774da990
-
SHA1
521b91f48605ce71195c5f6585d2cff5d41e5078
-
SHA256
0ddd3eaa7b59ed5bd3a335d9115e70b008e0f5598f16101a064ce9ebf60eea9c
-
SHA512
1884a2888d96a02dfb462dfc3fe9bb2b4e395dddbc843711113f4e39a6c4b05758a522f3c6195e104f365dae77a4f0083088a43d3db84cfe8af85fab466e2a0b
-
SSDEEP
1536:1WcPdwIG1cnbCo87UADi7wRxNko01dSIkQXCyypXSlJnxpvnc1r5LSOU/nkG4Fmf:VWI7URxNkMITpvnW5Mnj5kgwGX
Malware Config
Signatures
Files
-
0ddd3eaa7b59ed5bd3a335d9115e70b008e0f5598f16101a064ce9ebf60eea9c.exe windows x86
6ab5ff7887182592423456833a6b6003
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
IsProcessorFeaturePresent
ConvertDefaultLocale
SetThreadAffinityMask
TlsGetValue
FoldStringA
EnumSystemLanguageGroupsA
GetDateFormatA
SleepEx
GetProfileStringA
GetCurrentDirectoryW
DuplicateHandle
FindCloseChangeNotification
LocalCompact
GetCurrencyFormatW
AssignProcessToJobObject
CommConfigDialogA
CreateDirectoryW
EnumResourceLanguagesW
InitializeCriticalSection
GetCommMask
GetCPInfoExA
IsBadWritePtr
GetThreadContext
OpenSemaphoreW
SetFileApisToANSI
GetStringTypeExA
user32
CallWindowProcA
GetCapture
SetForegroundWindow
CharNextA
MenuItemFromPoint
DestroyMenu
GetDCEx
GetMessageExtraInfo
SendMessageTimeoutW
DdeSetUserHandle
GetKeyboardLayoutNameW
SetWindowsHookW
DrawTextExW
GetScrollPos
CreateAcceleratorTableW
GetTopWindow
IsDialogMessageW
UnpackDDElParam
DrawTextW
GetScrollRange
GetKeyNameTextW
DestroyIcon
DdeUnaccessData
LoadAcceleratorsW
GetClassLongA
RegisterClipboardFormatA
MessageBoxA
LoadKeyboardLayoutW
TrackMouseEvent
SetClipboardViewer
GetWindowPlacement
SetWindowLongA
SetKeyboardState
DdeInitializeA
GetWindowWord
FillRect
TranslateMessage
ClipCursor
ScreenToClient
IntersectRect
GetShellWindow
OpenInputDesktop
LoadCursorW
EnumPropsA
SendIMEMessageExA
GetGuiResources
GetSubMenu
RemoveMenu
GetWindowTextA
CharToOemW
GetLastActivePopup
FindWindowExW
GetMenuStringA
DeferWindowPos
GetMenuBarInfo
OpenWindowStationW
LockSetForegroundWindow
GetActiveWindow
ToUnicode
RealGetWindowClassW
DrawStateW
SetRectEmpty
GetMenuInfo
UnloadKeyboardLayout
DdeSetQualityOfService
RegisterWindowMessageA
DlgDirListW
SetDlgItemInt
OffsetRect
CheckDlgButton
DdeCreateDataHandle
WaitMessage
SetClipboardData
OemToCharBuffA
PostThreadMessageW
IMPGetIMEW
AppendMenuW
CharLowerA
GetProcessWindowStation
GetUserObjectInformationW
LoadBitmapW
GetMenuContextHelpId
GetClassInfoExW
IMPSetIMEW
DdeConnect
GetParent
MonitorFromRect
IsIconic
DdeAbandonTransaction
VkKeyScanA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ