Static task
static1
Behavioral task
behavioral1
Sample
dd479f3171acc5ec3b0a3a97224417d081a646aae907817ea84d21acbd658440.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd479f3171acc5ec3b0a3a97224417d081a646aae907817ea84d21acbd658440.exe
Resource
win10v2004-20220812-en
General
-
Target
dd479f3171acc5ec3b0a3a97224417d081a646aae907817ea84d21acbd658440
-
Size
146KB
-
MD5
908f6c72e60a9a1b923b235c785a4c80
-
SHA1
39640733a515ca5caf59d7d388e1aff3622d5296
-
SHA256
dd479f3171acc5ec3b0a3a97224417d081a646aae907817ea84d21acbd658440
-
SHA512
55d8343ed31bd89275414f1c6e8b51a7ce6f7b3dafac4f37cc6982c590e2b6694309fcfbf0b0f19fdbec97e2a54a8834969d4842046c3328bd56c9695912687a
-
SSDEEP
3072:tYRRo+wVDZkikf8USXPdeLmZz+d/QhvmuXDsQQhO:GRRo+eDZrkf5SXPXod/YvmuFQo
Malware Config
Signatures
Files
-
dd479f3171acc5ec3b0a3a97224417d081a646aae907817ea84d21acbd658440.exe windows x86
5f8cf14a4e1abac13118b5135768cf7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY
Imports
user32
CallWindowProcW
ChangeDisplaySettingsExA
CreatePopupMenu
CreateWindowExW
DrawTextExA
EmptyClipboard
GetClipboardData
GetListBoxInfo
GetMenu
InsertMenuA
RegisterClipboardFormatA
SetClassLongA
SetClipboardData
SetCursor
SetWindowsHookW
ShowCursor
kernel32
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MapViewOfFile
OutputDebugStringA
OutputDebugStringW
QueryDosDeviceA
SetLastError
UnmapViewOfFile
VirtualAlloc
VirtualFree
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ