Static task
static1
Behavioral task
behavioral1
Sample
dda30e160535e375e6079a7e46b0648770ad0f0e472994150e58691ee753db75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dda30e160535e375e6079a7e46b0648770ad0f0e472994150e58691ee753db75.exe
Resource
win10v2004-20221111-en
General
-
Target
dda30e160535e375e6079a7e46b0648770ad0f0e472994150e58691ee753db75
-
Size
2.1MB
-
MD5
4d1336bd1b4876da8478b128c3b483d3
-
SHA1
c30eaec0e2b378fb1de5b2b53934379196f30a7b
-
SHA256
dda30e160535e375e6079a7e46b0648770ad0f0e472994150e58691ee753db75
-
SHA512
4fe99e2a0ae8a1325b7c07a2e7d57b87445af90db51bb6ae9218b0fcd49e04d7ecefb6dbc29df47ca27eada89ff2354b1475b7fe8288726ccaf17d204bba45ee
-
SSDEEP
24576:1+Q9Gs61orFabJpby+uDyfr/SG/XEJS26rME0riwbl8AOVy8x9AN8987bi8kAk20:1dz61/pW+nZ/HfUiwJzOUi+NY2Bal
Malware Config
Signatures
Files
-
dda30e160535e375e6079a7e46b0648770ad0f0e472994150e58691ee753db75.exe windows x86
aec50f0b615dafef7f7a8b2c5cff0628
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
htonl
rasapi32
RasGetConnectStatusA
kernel32
ReadFile
user32
SendDlgItemMessageA
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayGetUBound
comctl32
ImageList_GetImageCount
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 860KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ