Static task
static1
Behavioral task
behavioral1
Sample
bddd8b1c0325ae173f812f7f9723fad7315541d1e5944dbcbe2e385d3ab17671.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bddd8b1c0325ae173f812f7f9723fad7315541d1e5944dbcbe2e385d3ab17671.exe
Resource
win10v2004-20220901-en
General
-
Target
bddd8b1c0325ae173f812f7f9723fad7315541d1e5944dbcbe2e385d3ab17671
-
Size
301KB
-
MD5
48799d806cef7595f77aa19325dd1fe0
-
SHA1
0a14ea24ef741830adf6b5815e84f4179a6196b4
-
SHA256
bddd8b1c0325ae173f812f7f9723fad7315541d1e5944dbcbe2e385d3ab17671
-
SHA512
58e50739b7f1b9aff0edf3826a3e8cd5054cfd5c6ed1fa964dc9974e6882530a819688b0b80c466698fa301e5bde7f0340d8cedd9385045fb04c57d22a46c2da
-
SSDEEP
6144:KzEBWnP4CG/698DF4HfKPmz5mxVsJl/baGwPpUIq6606HdLjgA:+w68SHfvzEVsJl/UUAsn
Malware Config
Signatures
Files
-
bddd8b1c0325ae173f812f7f9723fad7315541d1e5944dbcbe2e385d3ab17671.exe windows x86
22dba119e5db3c8340e9370b4ead6024
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
GetExitCodeThread
IsValidCodePage
HeapFree
TlsGetValue
LocalLock
CreateDirectoryW
FindClose
GetCurrentProcess
RemoveDirectoryW
GetTickCount
MapViewOfFile
IsBadWritePtr
GetLocaleInfoW
FindResourceW
VirtualProtect
GetDriveTypeW
GetFileAttributesA
GetFileAttributesA
SetLastError
GetModuleHandleA
user32
wsprintfW
IsWindow
GetWindowTextW
SetCursor
LoadCursorA
PostMessageW
GetWindowLongW
LoadImageW
SetFocus
PeekMessageW
LoadStringA
IsDialogMessageA
DispatchMessageA
msctf
DllUnregisterServer
DllUnregisterServer
TF_InitSystem
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE