?PoisoningSymptomsIncludeHeat@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
dd6e656c9377555d09aa85f377494b8714f08e2e6041d00ae28d89e55cbf2eec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd6e656c9377555d09aa85f377494b8714f08e2e6041d00ae28d89e55cbf2eec.exe
Resource
win10v2004-20220901-en
General
-
Target
dd6e656c9377555d09aa85f377494b8714f08e2e6041d00ae28d89e55cbf2eec
-
Size
154KB
-
MD5
94aba5db5c01e79ff62a52f16c6744f9
-
SHA1
fafd151afdf139217d20a9741a9582fe577caf9a
-
SHA256
dd6e656c9377555d09aa85f377494b8714f08e2e6041d00ae28d89e55cbf2eec
-
SHA512
127ed2c358175794cf9e87a50e00a8d5c9987f334c621249f4c43f7ec37f1754bddb55a80ff8a25465bce9076dc106be77ab035a875c855b56409d3ac36d75fe
-
SSDEEP
3072:MtVdK8CJeFfsg4sHwkFxo1/5C9Yxbnx5MNl0xpXsUI8UAfDdABnBTmljYQb:Qm8ffJpHwoxK5C9Yxr80xtBI8jD26L
Malware Config
Signatures
Files
-
dd6e656c9377555d09aa85f377494b8714f08e2e6041d00ae28d89e55cbf2eec.exe windows x86
851a0491719061e3a6b1f66e0d688da3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsPrefixW
PathGetCharTypeA
UrlIsW
kernel32
OpenEventW
user32
VkKeyScanW
GetDesktopWindow
Exports
Exports
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE