Static task
static1
Behavioral task
behavioral1
Sample
dde68722564f47a025ccc0510a500f7cb577586b4ea06885577e503776d2cad2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dde68722564f47a025ccc0510a500f7cb577586b4ea06885577e503776d2cad2.exe
Resource
win10v2004-20220901-en
General
-
Target
dde68722564f47a025ccc0510a500f7cb577586b4ea06885577e503776d2cad2
-
Size
796KB
-
MD5
69bffe7313b28937f53991bdd7a30107
-
SHA1
ec193b30caae2a30f44825c0cb20a82caafd1199
-
SHA256
dde68722564f47a025ccc0510a500f7cb577586b4ea06885577e503776d2cad2
-
SHA512
10767acb5dba5bd2d16da6dd3449078605ea2702aa2f288f47983906f06dae7bb76af8329b85e6166961d863b407461424c62a96888856823278709aad86261a
-
SSDEEP
24576:yXFtQ91pTrgYU9fEq/LybIRFxCxXWiblSrp1Y:yXbQXpTrdU98qJF0wiMc
Malware Config
Signatures
Files
-
dde68722564f47a025ccc0510a500f7cb577586b4ea06885577e503776d2cad2.exe windows x86
5e8d378f21450cc11e516622c8650c5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResetEvent
GetStdHandle
GetExitCodeThread
ReleaseMutex
HeapSize
GetProcessHeap
GetDriveTypeW
FindClose
GetCommandLineA
RemoveDirectoryA
FindResourceA
CreateDirectoryA
SetLastError
MapViewOfFile
CancelIo
GetFileAttributesA
GetModuleHandleA
VirtualProtect
GetLocaleInfoA
IsBadWritePtr
CreateMailslotW
user32
DispatchMessageA
GetWindowLongW
IsDialogMessageA
GetCapture
DestroyMenu
wsprintfA
PeekMessageA
SetCursor
GetWindowTextW
LoadCursorA
LoadImageW
SetFocus
PostMessageW
ipsmsnap
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ