Static task
static1
Behavioral task
behavioral1
Sample
dd3c6d45790c9bae07577bb7264aa38a57ff08c8b786423d84ce6529d1e5b66b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd3c6d45790c9bae07577bb7264aa38a57ff08c8b786423d84ce6529d1e5b66b.exe
Resource
win10v2004-20220901-en
General
-
Target
dd3c6d45790c9bae07577bb7264aa38a57ff08c8b786423d84ce6529d1e5b66b
-
Size
248KB
-
MD5
a2eace1c7e7329854f9daeea1ff99640
-
SHA1
1a70eb5f5f8777fce83a52f5e092ecc4c5cd9d54
-
SHA256
dd3c6d45790c9bae07577bb7264aa38a57ff08c8b786423d84ce6529d1e5b66b
-
SHA512
8466891214ce4e80b93865f8c87467ed3fee09807e3fe8a4b0cfc63aa1e3881c9203504f710777a6cf2e3c35c3b2c1372443240195970d4b5558656d6bbbf1ae
-
SSDEEP
6144:Cx+0xvbmMIuog9LcMEHWKfObjfgHVkRpr11HwGoh3REIMwdwq/9zwrW:Y5bmMIzcn8WUOX8VkDHwGoVMiV
Malware Config
Signatures
Files
-
dd3c6d45790c9bae07577bb7264aa38a57ff08c8b786423d84ce6529d1e5b66b.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 70KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE