Static task
static1
Behavioral task
behavioral1
Sample
ddf185afceb7bf0b925e50243eef7282ba636029f0cf7600d42d06d1bf87fdc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddf185afceb7bf0b925e50243eef7282ba636029f0cf7600d42d06d1bf87fdc2.exe
Resource
win10v2004-20220812-en
General
-
Target
ddf185afceb7bf0b925e50243eef7282ba636029f0cf7600d42d06d1bf87fdc2
-
Size
372KB
-
MD5
676425e048381ef3755af91c533caea0
-
SHA1
a15720996cb94be864b319ebd2b9c70b02942d91
-
SHA256
ddf185afceb7bf0b925e50243eef7282ba636029f0cf7600d42d06d1bf87fdc2
-
SHA512
5c5a15164a960929d3b9690c82c3733d867bcc983b59677bbad08815150575c9e6d98bbc31253d8a0bdfe0560e23cb1aa1f0b0685fb037741038ea5d870ff7f5
-
SSDEEP
6144:w6FdaOBlORj0W8v6Z6jEuCX10bK4euHKua4yZB08WdUR3e5uK7xL:SOzOJ0W8v1j62KTB0/dUE
Malware Config
Signatures
Files
-
ddf185afceb7bf0b925e50243eef7282ba636029f0cf7600d42d06d1bf87fdc2.exe windows x86
d0dc73a92c089cd48d90167827ac85e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
CompareStringA
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
SetStdHandle
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
RemoveDirectoryA
FindNextFileA
ResetEvent
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
SetEvent
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
GetVersion
EnterCriticalSection
HeapFree
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
CreateEventW
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetPrivateProfileStringA
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
GetCurrentThread
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
FreeLibrary
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetConsoleOutputCP
GetStdHandle
GetSystemDefaultLangID
GetUserDefaultLCID
GetSystemDefaultLCID
GetModuleHandleW
SizeofResource
HeapCreate
VirtualFree
SetHandleCount
VirtualAlloc
user32
LoadCursorA
GetDlgItem
SetTimer
GetWindowLongA
CheckMenuItem
SetWindowTextA
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
EndPaint
CreateWindowExA
GetDesktopWindow
RegisterClassA
LoadStringA
TranslateMessage
ShowWindow
GetParent
DestroyWindow
UnregisterClassA
ReleaseDC
GetDC
DispatchMessageA
SetWindowPos
PostQuitMessage
SetForegroundWindow
MoveWindow
MessageBoxA
GetKeyState
IsWindowVisible
GetSubMenu
SendMessageA
DrawTextA
GetClientRect
SetCursor
InvalidateRect
oleaut32
SysAllocString
VariantInit
SysFreeString
SysStringLen
advapi32
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 336KB - Virtual size: 333KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ