Static task
static1
Behavioral task
behavioral1
Sample
dd1bb3afbf96c822af8d5b8633e265621dc997a1e78e882f081124e255df59b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd1bb3afbf96c822af8d5b8633e265621dc997a1e78e882f081124e255df59b3.exe
Resource
win10v2004-20220901-en
General
-
Target
dd1bb3afbf96c822af8d5b8633e265621dc997a1e78e882f081124e255df59b3
-
Size
34KB
-
MD5
1d327d8c9b18bb7149d7d3395a508aab
-
SHA1
8c358af5a5da471c2a266bca08b88bc0465cbc18
-
SHA256
dd1bb3afbf96c822af8d5b8633e265621dc997a1e78e882f081124e255df59b3
-
SHA512
d659be63c99ede00518e702763fe29b7853becc45433a017790bf84089d8a29d42b3d6d85684efed70392f6a446f7ea3bc55a2d998e15588534b3539306f420d
-
SSDEEP
768:W/H5FyHlSh9squ1AfNCGRlgOpNI7+fd/xfTHefirw5:yH5FyH0h9sgNCGbgOpNI7+fFJEi
Malware Config
Signatures
Files
-
dd1bb3afbf96c822af8d5b8633e265621dc997a1e78e882f081124e255df59b3.exe windows x86
7f90ed7bb1fc2a0573113789ed46f946
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
GetTempPathA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WriteFile
CreateFileA
LockResource
LoadResource
OpenMutexA
EnumResourceNamesA
EndUpdateResourceA
lstrlenA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
CreateMutexA
CopyFileA
GetSystemDirectoryA
TerminateProcess
ExitThread
GetLastError
ReleaseMutex
GetModuleFileNameA
SetFileAttributesA
ExitProcess
WaitForSingleObject
CloseHandle
GetSystemInfo
GlobalMemoryStatusEx
GetProcAddress
GetComputerNameA
GetSystemDefaultUILanguage
Sleep
LoadLibraryA
FindResourceA
GetStartupInfoA
GetModuleHandleA
user32
wsprintfA
advapi32
StartServiceCtrlDispatcherA
CreateServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ws2_32
WSAStartup
select
__WSAFDIsSet
recv
htons
connect
setsockopt
inet_ntoa
WSACleanup
closesocket
send
socket
WSAIoctl
inet_addr
sendto
htonl
gethostbyname
msvcrt
_XcptFilter
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
realloc
malloc
sprintf
??2@YAPAXI@Z
strstr
atoi
strncpy
strcspn
exit
localtime
time
strncmp
_except_handler3
_exit
_initterm
_acmdln
__getmainargs
iphlpapi
GetIfTable
Sections
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ