Static task
static1
Behavioral task
behavioral1
Sample
ddfd7b8ae53c09590c9921e79f501c7b9d8e30f94d31a7bbee6af50f2d57d7c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddfd7b8ae53c09590c9921e79f501c7b9d8e30f94d31a7bbee6af50f2d57d7c2.exe
Resource
win10v2004-20220812-en
General
-
Target
ddfd7b8ae53c09590c9921e79f501c7b9d8e30f94d31a7bbee6af50f2d57d7c2
-
Size
265KB
-
MD5
48732648ca8545aedd9e6ae7b1562700
-
SHA1
84696b073402582260ba34fdc24d6c356cb04621
-
SHA256
ddfd7b8ae53c09590c9921e79f501c7b9d8e30f94d31a7bbee6af50f2d57d7c2
-
SHA512
f6aa2c94399cda65f197cc03f04a81d845f069606dc7f1361fb7d68a81e6de7ffb29110470b5668da5a5664b58db3937720f8ce7c7a0d8564a4958ed99a360a7
-
SSDEEP
6144:+JncMB97INk18pDnAELD9eR/9uyVp+hD7aCEp0EjiHi83vbFN+V:OnN9IvLAGDGwySh3PJHi8/bH
Malware Config
Signatures
Files
-
ddfd7b8ae53c09590c9921e79f501c7b9d8e30f94d31a7bbee6af50f2d57d7c2.exe windows x86
2edb9721a9f81957baab51940a396eb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegEnumKeyExA
RegLoadKeyW
RegGetKeySecurity
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyA
RegDeleteValueW
RegOpenKeyA
RegReplaceKeyA
RegQueryValueW
RegEnumKeyA
RegEnumKeyW
RegLoadKeyA
RegReplaceKeyA
RegReplaceKeyW
RegCreateKeyExA
RegGetKeySecurity
RegEnumKeyExW
RegEnumValueA
RegQueryValueExA
RegEnumValueW
RegQueryValueW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyA
RegReplaceKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExW
RegCreateKeyW
RegEnumValueW
RegOpenKeyExA
RegDeleteValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegLoadKeyA
RegFlushKey
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyW
RegQueryValueExA
RegReplaceKeyW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyA
RegQueryInfoKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyW
RegCreateKeyExW
RegLoadKeyW
RegDeleteKeyA
RegOpenKeyA
RegDeleteKeyW
RegReplaceKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumValueA
user32
CalcMenuBar
CopyRect
CopyImage
CreateIcon
CopyIcon
DialogBoxParamA
IsMenu
GetWindowTextA
DialogBoxParamW
AppendMenuA
GetDlgItem
CloseWindow
DrawTextA
AlignRects
GetDlgItem
IsMenu
CopyRect
CopyIcon
DrawIcon
GetWindowTextA
GetFocus
DialogBoxParamW
CreateIcon
GetMenu
CloseWindow
DrawTextA
GetDC
BlockInput
AppendMenuA
DrawTextW
kernel32
GetCurrentThreadId
FindAtomA
CreateDirectoryA
GetCurrentProcess
CreateProcessA
FindFirstFileA
GlobalFree
GetFileTime
GetConsoleMode
GetCurrentThread
ExitProcess
GetOEMCP
Sleep
DeleteAtom
CopyFileW
GetFileSize
GetOEMCP
GetCurrentThreadId
GetCPInfo
GetConsoleMode
GetUserDefaultLangID
OpenFile
DeleteFileA
ExitThread
FindAtomA
GetLastError
Sleep
DeleteAtom
GetComputerNameA
GlobalFree
GetCurrentProcessId
GlobalFree
GetFileSize
DeleteAtom
CreateThread
DeleteFileA
CreateDirectoryA
OpenFile
GetConsoleOutputCP
GetFileTime
CreateProcessA
FindAtomA
Sleep
GetConsoleOutputCP
GetStdHandle
GetLastError
CreateThread
GetCurrentProcessId
OpenFile
ExitThread
GetCurrentProcess
DeleteFileW
GetCurrentThread
GetCurrentThreadId
GetFileTime
DeleteFileW
GetLastError
GetConsoleMode
CreateDirectoryA
GetOEMCP
GlobalFree
GetCurrentProcess
GetCPInfo
GetFileSize
CreateProcessA
CopyFileW
GetStdHandle
ExitThread
Sleep
GetConsoleOutputCP
ExitProcess
DeleteAtom
GetFileTime
DeleteFileA
Sections
.itext Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 226KB - Virtual size: 594KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ