Static task
static1
Behavioral task
behavioral1
Sample
dd1058090a491f107863a3feeb5aeaceabe46288057037aa921b56424b15f6b7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd1058090a491f107863a3feeb5aeaceabe46288057037aa921b56424b15f6b7.exe
Resource
win10v2004-20220812-en
General
-
Target
dd1058090a491f107863a3feeb5aeaceabe46288057037aa921b56424b15f6b7
-
Size
490KB
-
MD5
0c667f2186df1e7f8ea1d5f8620ec5a0
-
SHA1
7da047dba00842ba7e11ffeaaa687829b16be581
-
SHA256
dd1058090a491f107863a3feeb5aeaceabe46288057037aa921b56424b15f6b7
-
SHA512
36d4621b1b00c90320c5e4ac01bed36bd5f70d756884f8596a65df24f11dbf055e629a1e761b0834b9d285f7605ffc16a11cbc7abfed4a7982e3433b580e73b8
-
SSDEEP
12288:091d0oU3qcV65oeP6nBcS6n1RGtpTNEUSl7YWGpTMfnm0:091QqcE5hCBcS6narNE1l7Y9TMr
Malware Config
Signatures
Files
-
dd1058090a491f107863a3feeb5aeaceabe46288057037aa921b56424b15f6b7.exe windows x86
d24c83aafe4b810bb634f5f31e37817e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlGetVersion
RtlNtStatusToDosError
NtSecureConnectPort
user32
GetCursor
GetKBCodePage
GetMessageTime
Sections
.text Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 189B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE