Static task
static1
Behavioral task
behavioral1
Sample
dd03ac44568a316d4a5181359ceace1aafee07626d6baa042e684cf210b37893.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd03ac44568a316d4a5181359ceace1aafee07626d6baa042e684cf210b37893.exe
Resource
win10v2004-20220812-en
General
-
Target
dd03ac44568a316d4a5181359ceace1aafee07626d6baa042e684cf210b37893
-
Size
133KB
-
MD5
22d166613f19cc263f8049bd573f51bd
-
SHA1
1fb3c735fe3dda3632262baf0082917b1ed1fbcf
-
SHA256
dd03ac44568a316d4a5181359ceace1aafee07626d6baa042e684cf210b37893
-
SHA512
f552763a3b3e786bc45318c33b2ea26977d951b0ab1fa15c8bd0fc52d41478b3b5d97eab37e4a1f2094ef56c3e2fb1c48fd9ec4cae7897603f5eec902d773298
-
SSDEEP
1536:wdxlrRbQSxecVSK7JsBXMdlQFtyym9ZJXVcwKDguB2YvhpzTQAhMe:eccLlVdlQRoXVc9DgWL
Malware Config
Signatures
Files
-
dd03ac44568a316d4a5181359ceace1aafee07626d6baa042e684cf210b37893.exe windows x86
72de3406e9421588f77bc2455a5bae51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCommandLineA
LoadLibraryA
lstrcatA
GetSystemDirectoryA
CreateFileA
WriteFile
GetProcAddress
user32
DefWindowProcA
DeleteMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawMenuBar
DrawTextA
EnableMenuItem
EnableWindow
EndDialog
EndPaint
FillRect
FindWindowA
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemTextA
GetKeyNameTextA
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
CreateWindowExA
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
MapVirtualKeyA
MessageBeep
MessageBoxA
MoveWindow
PeekMessageA
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
WinHelpA
wsprintfA
RegisterClassExA
CheckMenuItem
ChangeDisplaySettingsA
BeginPaint
IsIconic
gdi32
GetStockObject
shell32
ShellAboutA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ata2 Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ