Static task
static1
Behavioral task
behavioral1
Sample
dd149dd1a30ebd6c9f010695db49f62853c83bd23c08e894c239fbc4269e3bae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd149dd1a30ebd6c9f010695db49f62853c83bd23c08e894c239fbc4269e3bae.exe
Resource
win10v2004-20220901-en
General
-
Target
dd149dd1a30ebd6c9f010695db49f62853c83bd23c08e894c239fbc4269e3bae
-
Size
381KB
-
MD5
81bd5d8f5c397ba681e5ed30a7f932b0
-
SHA1
61cd8b733bb9491aadd024cf3e73022d52468b89
-
SHA256
dd149dd1a30ebd6c9f010695db49f62853c83bd23c08e894c239fbc4269e3bae
-
SHA512
ba60b2416701cd1ccdb841eeccd69a8ac11d4427399d66ff39693031f463f6353fa5d3cb92fe52f1a8507f5afeeb677eefc790e78ea45aebdab58e02c3082a6e
-
SSDEEP
6144:0cP+fyS2FP3Pq95boUobQ0uRHStLCvJTT/D88W6SvsQVnJxDK7R8dEL3Ke:V+fyv1otY1uRytLCvJvrApkCnnK1WEGe
Malware Config
Signatures
Files
-
dd149dd1a30ebd6c9f010695db49f62853c83bd23c08e894c239fbc4269e3bae.exe windows x86
f88a24da40cdfd0ad69e2f069013cdbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
InterlockedDecrement
FindResourceExW
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
GetCurrentProcessId
GetTickCount
HeapSize
GetVersionExA
QueryPerformanceCounter
WaitForSingleObject
RaiseException
lstrlenW
lstrcmpiW
InterlockedExchange
LoadLibraryA
HeapFree
FindResourceW
GetProcAddress
GetOverlappedResult
FreeLibrary
GetProcessHeap
CancelIo
GetCurrentProcess
LockResource
EnterCriticalSection
GetLastError
SizeofResource
CreateFileW
SetUnhandledExceptionFilter
GetVolumePathNamesForVolumeNameW
LoadLibraryExW
HeapDestroy
DeviceIoControl
LoadResource
GetCPInfo
GetThreadLocale
SetThreadLocale
GetDriveTypeW
OutputDebugStringA
HeapAlloc
CreateEventW
CreateThread
InterlockedIncrement
GetModuleFileNameW
GlobalAlloc
GetVolumeNameForVolumeMountPointW
MultiByteToWideChar
HeapReAlloc
ResetEvent
LeaveCriticalSection
GetSystemTimeAsFileTime
msvcrt
??2@YAPAXI@Z
realloc
??_V@YAXPAX@Z
__dllonexit
_XcptFilter
__p__commode
??1type_info@@UAE@XZ
_amsg_exit
_onexit
memset
_purecall
malloc
calloc
_CxxThrowException
__set_app_type
_unlock
_lock
_initterm
exit
_errno
__getmainargs
free
??_U@YAPAXI@Z
??3@YAXPAX@Z
_vsnwprintf
setupapi
SetupDiOpenDeviceInfoW
SetupDiEnumDeviceInterfaces
CM_Get_Device_Interface_List_SizeW
SetupDiGetDeviceInterfaceDetailW
SetupDiCreateDeviceInfoList
CM_Get_Device_IDW
CM_Get_Device_Interface_ListW
CM_Locate_DevNodeW
CM_Get_Parent_Ex
SetupDiGetClassDevsW
CM_Get_DevNode_Custom_PropertyW
SetupDiDestroyDeviceInfoList
shlwapi
SHStrDupW
PathGetDriveNumberW
advapi32
RegDeleteValueW
RegCloseKey
RegOpenKeyW
RegisterTraceGuidsW
GetTraceLoggerHandle
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
TraceMessage
RegCreateKeyExW
RegOpenKeyExW
GetTraceEnableFlags
UnregisterTraceGuids
GetTraceEnableLevel
ole32
StringFromGUID2
CoCreateInstance
PropVariantClear
CoTaskMemFree
CoInitializeEx
CoTaskMemRealloc
CoUninitialize
CoTaskMemAlloc
CoGetMalloc
CoWaitForMultipleHandles
user32
LoadStringW
CharNextW
UnregisterClassA
shell32
ShellExecuteExW
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE