Static task
static1
Behavioral task
behavioral1
Sample
ddc6cb6a3daf3a8cf92f35224392baffd2d6d8e7fda11f6a28d169c1195a620f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddc6cb6a3daf3a8cf92f35224392baffd2d6d8e7fda11f6a28d169c1195a620f.exe
Resource
win10v2004-20220812-en
General
-
Target
ddc6cb6a3daf3a8cf92f35224392baffd2d6d8e7fda11f6a28d169c1195a620f
-
Size
21KB
-
MD5
092ef5313a50336c1a375a0348d601a0
-
SHA1
fe71a4a07fc355a30621dc94acce4072c831b2bf
-
SHA256
ddc6cb6a3daf3a8cf92f35224392baffd2d6d8e7fda11f6a28d169c1195a620f
-
SHA512
a724fb3d7b8869f8c31fe5c12c7aab2bd57a561649b7152860f344e1c3442f378051668bdd59f7cf1fe4177c972bb5b8f6d38fedc3e0b818f1d392457dcf7588
-
SSDEEP
384:5K1RQ9hSRwgPVNq9MsHKBpBFA/gwFGQnPBVioOMkRtgu:mRuSReMsHKBpBu/gwFG4VzbM2u
Malware Config
Signatures
Files
-
ddc6cb6a3daf3a8cf92f35224392baffd2d6d8e7fda11f6a28d169c1195a620f.exe windows x86
46677d1787c51c0ad3711668aa1f8928
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
lstrlenW
WriteConsoleW
GetStartupInfoA
CreatePipe
ClearCommBreak
DisconnectNamedPipe
WriteConsoleW
SetEvent
lstrcpyW
GetModuleHandleA
WriteConsoleW
GetLastError
GetPriorityClass
SuspendThread
IsDebuggerPresent
HeapCreate
CloseHandle
GetFileAttributesA
CopyFileW
GetCurrentDirectoryA
msftedit
RichListBoxWndProc
RichComboBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
shell32
DragQueryFileA
DuplicateIcon
DragAcceptFiles
ShellMessageBoxA
DragFinish
SHGetMalloc
ShellAboutA
SHGetSettings
SHFree
StrChrA
ExtractIconA
DllUnregisterServer
SHGetDiskFreeSpaceA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ