Static task
static1
Behavioral task
behavioral1
Sample
dda6bb7a7373a98eedc6849a7828714de792332507760860eefee0b3b3e6e22e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dda6bb7a7373a98eedc6849a7828714de792332507760860eefee0b3b3e6e22e.exe
Resource
win10v2004-20220812-en
General
-
Target
dda6bb7a7373a98eedc6849a7828714de792332507760860eefee0b3b3e6e22e
-
Size
87KB
-
MD5
988abbadba23d5f23b5ce0b2bb3fc63a
-
SHA1
42cd885fdc3d1820b95d360679636d7eb3e3bafb
-
SHA256
dda6bb7a7373a98eedc6849a7828714de792332507760860eefee0b3b3e6e22e
-
SHA512
5b1ba75bac97868638d1327b19bea01502000da32d602de0fa6d1bc3e580d13035a5a66fbaebbfd1f7113fbfd1660d902161da78e5d19c4444f2824855c7cba5
-
SSDEEP
1536:MXDR0LKzg517cEUNSAf+doSEaCcJ7nLrnwCv3r5BH7qus7jT1yWNYzt8:MOzvyNSVDN3r5BH7Ps7j7F
Malware Config
Signatures
Files
-
dda6bb7a7373a98eedc6849a7828714de792332507760860eefee0b3b3e6e22e.exe windows x86
d138b4428074a69c52cd454d3426b9ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.text Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE