Static task
static1
Behavioral task
behavioral1
Sample
dda23530bac19ea1e8246a435bf3537de2d65babe783661ff06377cf2ea51c19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dda23530bac19ea1e8246a435bf3537de2d65babe783661ff06377cf2ea51c19.exe
Resource
win10v2004-20220812-en
General
-
Target
dda23530bac19ea1e8246a435bf3537de2d65babe783661ff06377cf2ea51c19
-
Size
147KB
-
MD5
18ebbcfba72aa62238c0410e2c95be30
-
SHA1
54d03f26658cbfdb44f88d7aa3493cdc8160bd7f
-
SHA256
dda23530bac19ea1e8246a435bf3537de2d65babe783661ff06377cf2ea51c19
-
SHA512
54b78a9a4dd27d556f942bec1dd9a88d4b2a694f273bd5e7fe7ae276cdf44e076c47b644699d1e618c22b047d26531217043f42155fbe366e6d7aabc143de006
-
SSDEEP
3072:xcfUOcwyr31Fx1w0SPdCuGE+pm2p/WcexG:S8LwyrbbXC4uGnjAc
Malware Config
Signatures
Files
-
dda23530bac19ea1e8246a435bf3537de2d65babe783661ff06377cf2ea51c19.exe windows x86
dbec34a3895b6b0c234f34a0e16c1cf9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
WriteFile
IsDBCSLeadByteEx
PostQueuedCompletionStatus
GetExitCodeThread
GetQueuedCompletionStatus
ExpandEnvironmentStringsW
SetProcessWorkingSetSize
ResetWriteWatch
WritePrivateProfileSectionA
IsValidCodePage
IsValidLocale
GetNamedPipeHandleStateW
RtlUnwind
ReadFileScatter
GetSystemDefaultLangID
IsDebuggerPresent
SetCurrentDirectoryW
LockFile
CreateEventA
GetDiskFreeSpaceW
GetFileAttributesExA
WritePrivateProfileSectionW
WritePrivateProfileStringA
GetWriteWatch
MapViewOfFile
WritePrivateProfileStructA
CreateFileMappingA
DeleteFileW
LocalFlags
EnumUILanguagesA
QueryInformationJobObject
FindFirstFileA
lstrcpyW
GetBinaryTypeW
GetFileAttributesA
GetStringTypeW
DefineDosDeviceW
EndUpdateResourceA
CreateFileW
user32
DefWindowProcW
SetShellWindow
MonitorFromWindow
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE