Static task
static1
Behavioral task
behavioral1
Sample
dd22291ae7ad4bc68d9b0c16a6d941bab0b394b3f22abc0521fd2cc598cf9c74.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd22291ae7ad4bc68d9b0c16a6d941bab0b394b3f22abc0521fd2cc598cf9c74.exe
Resource
win10v2004-20221111-en
General
-
Target
dd22291ae7ad4bc68d9b0c16a6d941bab0b394b3f22abc0521fd2cc598cf9c74
-
Size
168KB
-
MD5
20d381357b8855ea42b90669bb2d6a7e
-
SHA1
eec7dc270aebbcc4ac8ed5df758d64784f301324
-
SHA256
dd22291ae7ad4bc68d9b0c16a6d941bab0b394b3f22abc0521fd2cc598cf9c74
-
SHA512
ddde770ed115c3e09c9270a86268964cc384222b0bf5fcfaa8f1857232a6c2fa3794acef865e83406feaebdd85bfad684d3b7af00a1436df21c0e60395fca791
-
SSDEEP
3072:FdQfzGLKJQqFTY4Z9XhfgMFS2z+U+tGxjnoa2iKTNMhuzKpGB:cfXbFj9xfgMQ26ZtWoa2iKTNOuf
Malware Config
Signatures
Files
-
dd22291ae7ad4bc68d9b0c16a6d941bab0b394b3f22abc0521fd2cc598cf9c74.exe windows x86
bcd81398dc4991f2840c355c1d92baa4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
VirtualProtect
user32
wsprintfA
wvsprintfA
Sections
kkW(GdCG Size: - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
N)q0MQpT Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
u$_xFI>a Size: - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
U"n4^9k, Size: - Virtual size: 624B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
/!w,y<Ou Size: - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ux'7w_Kr Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
<hCO,IO2 Size: 4KB - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ