Static task
static1
Behavioral task
behavioral1
Sample
dd20e4f969c677078cb9bb143a4ec714a460ff64d39f8598a1991ce99213c41e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd20e4f969c677078cb9bb143a4ec714a460ff64d39f8598a1991ce99213c41e.exe
Resource
win10v2004-20220812-en
General
-
Target
dd20e4f969c677078cb9bb143a4ec714a460ff64d39f8598a1991ce99213c41e
-
Size
83KB
-
MD5
4a6df796ff766c8b48dd7c7a6d2b5300
-
SHA1
e5f25ab674b8e3f4a510ee6287bade3cc8f05926
-
SHA256
dd20e4f969c677078cb9bb143a4ec714a460ff64d39f8598a1991ce99213c41e
-
SHA512
2d03e34be02bdb0e2f129be6b4fc822f5b29fc4b91310e36e92a5df17d3602252be4b236e5fa5c8814f32ff00a46e485e11240a931560670d273f6e97f4be547
-
SSDEEP
1536:Bg3+4FMnlwv7mq85mP7J+yo+Z3v8gnlqopjVrs2ryrd1vUQuqSuWnRrQ:Bg3+4FMnqFciI0v8gVHs2qmRk
Malware Config
Signatures
Files
-
dd20e4f969c677078cb9bb143a4ec714a460ff64d39f8598a1991ce99213c41e.exe windows x86
b600da833c6b199c6aa0d25edd08bdc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
GetModuleFileNameW
DeleteTimerQueueEx
FileTimeToDosDateTime
MoveFileWithProgressW
FillConsoleOutputAttribute
CreateDirectoryW
HeapValidate
LZDone
NlsResetProcessLocale
CmdBatNotification
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE