Static task
static1
Behavioral task
behavioral1
Sample
ddaf909a13aff4e914584f9e9dfb38ab759eeba9d4a02d29c1f3b3c68a05ed9a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ddaf909a13aff4e914584f9e9dfb38ab759eeba9d4a02d29c1f3b3c68a05ed9a.exe
Resource
win10v2004-20220812-en
General
-
Target
ddaf909a13aff4e914584f9e9dfb38ab759eeba9d4a02d29c1f3b3c68a05ed9a
-
Size
767KB
-
MD5
07ecfb46adc0d7946dd672791f9d5931
-
SHA1
b3c82d816157b75aca6fe17de5d686bfee651bf5
-
SHA256
ddaf909a13aff4e914584f9e9dfb38ab759eeba9d4a02d29c1f3b3c68a05ed9a
-
SHA512
66042a7100de6132e6f32c68a428072d754ecc0de83efc623cb288eb690e2f572763fe7c4c2d0dc12c38cad7cda259abfc7485930ebcd2dfeddd5c3311f5b97f
-
SSDEEP
12288:QvfaO8Q2xckFxlwrbL5I06HWOD/iThENIFjNn2Pg481MAN19Rb2Jtzj3s7Z8pO+p:Qv0Q2xckFxlwbOzWq/MENqKgvC8RbSzf
Malware Config
Signatures
Files
-
ddaf909a13aff4e914584f9e9dfb38ab759eeba9d4a02d29c1f3b3c68a05ed9a.exe windows x86
0224bf4822aa368228a0fa14e4331cff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
GetCommandLineW
ReleaseMutex
HeapDestroy
lstrlenA
HeapSize
DeleteFileA
LoadLibraryA
ExitProcess
ReleaseSemaphore
RemoveDirectoryW
SetLastError
RemoveDirectoryW
GetStartupInfoA
CreateFileA
GetStdHandle
MapViewOfFile
CreateFileMappingW
SetLastError
CreatePipe
CreateMutexA
VirtualProtectEx
GetFileSize
GetVersion
CreateDirectoryW
uxtheme
IsThemeActive
GetThemeBool
CloseThemeData
GetThemeColor
GetThemeTextMetrics
DrawThemeEdge
GetThemeTextExtent
GetThemeSysSize
GetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData
SetWindowTheme
feclient
FeClientInitialize
FeClientInitialize
FeClientInitialize
FeClientInitialize
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE