Static task
static1
Behavioral task
behavioral1
Sample
ddc90e9ec2b8285d085fa6ef9b34b186d7a7fca2b16fad7b716e46091daaa2ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddc90e9ec2b8285d085fa6ef9b34b186d7a7fca2b16fad7b716e46091daaa2ea.exe
Resource
win10v2004-20220812-en
General
-
Target
ddc90e9ec2b8285d085fa6ef9b34b186d7a7fca2b16fad7b716e46091daaa2ea
-
Size
53KB
-
MD5
2615193be2377c25faee916283e0be2f
-
SHA1
5cd4c42577b45fe13283c8ab721384f162cf32db
-
SHA256
ddc90e9ec2b8285d085fa6ef9b34b186d7a7fca2b16fad7b716e46091daaa2ea
-
SHA512
309f31748f955f67c992c3a00397b21f63b6ac207ede3ddd96216beaec05de8ead93a291def54f8541894615a4dfc7ee9fe8c03826483844c33dbfe59d3491fc
-
SSDEEP
768:qQg66T8v3dpKNTJlodcMK1akGXrGRh5IHMbXT45xbGT:FgrwfETYdKGXaNamD4Tb
Malware Config
Signatures
Files
-
ddc90e9ec2b8285d085fa6ef9b34b186d7a7fca2b16fad7b716e46091daaa2ea.exe windows x86
3c1a92549ceb9fde724b5b282c756156
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
__argc
__argv
advapi32
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
kernel32
GetCurrentThreadId
GlobalAddAtomW
GetWindowsDirectoryW
GetModuleFileNameW
GetModuleHandleA
lstrlenA
GetStartupInfoA
FreeLibrary
InterlockedDecrement
GetLastError
GetProcAddress
LoadLibraryW
InterlockedIncrement
WideCharToMultiByte
LocalFree
GetSystemDirectoryW
lstrcpynW
lstrcmpiW
GlobalFree
GlobalAlloc
lstrlenW
GlobalReAlloc
lstrcpyW
MultiByteToWideChar
GetPrivateProfileStringW
FormatMessageW
GetModuleHandleW
ntdll
atol
shlwapi
StrCatW
user32
GetPropW
wsprintfW
LoadStringW
CharNextW
CharPrevW
GetParent
UnhookWindowsHookEx
MessageBoxW
SetWindowsHookExW
SetWindowPos
GetWindowRect
RemovePropW
SetPropW
IsWindowVisible
ShowWindow
GetSystemMetrics
rasman
RasRpcGetInstalledProtocols
RasRpcGetInstalledProtocolsEx
RasRpcGetSystemDirectory
RasRpcGetUserPreferences
RasRpcSetUserPreferences
rpcrt4
I_RpcExceptionFilter
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ