Static task
static1
Behavioral task
behavioral1
Sample
d7ddd91b33c6567d22785d7044a6298ab335a75556c98d2a0863e84c7d463466.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d7ddd91b33c6567d22785d7044a6298ab335a75556c98d2a0863e84c7d463466.exe
Resource
win10v2004-20220901-en
General
-
Target
d7ddd91b33c6567d22785d7044a6298ab335a75556c98d2a0863e84c7d463466
-
Size
210KB
-
MD5
2578d2e42ef2943c1c56632f7b608750
-
SHA1
b5cf85739203719c3df3a86c4a9e8336b8224486
-
SHA256
d7ddd91b33c6567d22785d7044a6298ab335a75556c98d2a0863e84c7d463466
-
SHA512
1511eaa4a7a673a6cc959445ad35ea7d1fb6a62db0833fe1420826eb2438c06a11607fdf0af49c6fa7b06d930346f0962932029185abb51cd3f283ca8359b9ed
-
SSDEEP
3072:khna4whVvK6iaO4VnA8wn5sJRFHg8a0RXGwJ1k8+7PpmbovDbe5ySf9N:khaXNV7zXvRgdkXjiuo7beBN
Malware Config
Signatures
Files
-
d7ddd91b33c6567d22785d7044a6298ab335a75556c98d2a0863e84c7d463466.exe windows x86
4ff7e9c754ffb0f6696e8a93c4ea5c3a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetFileSize
SetFilePointer
ResetEvent
GetUserDefaultUILanguage
CreateEventA
ReleaseMutex
GetVersionExA
CreateThread
GetComputerNameA
FatalExit
OutputDebugStringA
GetLogicalDrives
GetOEMCP
DebugBreak
CloseHandle
WriteFile
GetCommandLineA
GetThreadLocale
LocalFree
GetUserDefaultLCID
GetProcAddress
CreateMutexA
SetEvent
ReadFile
SuspendThread
GetUserDefaultLangID
DeleteFileA
CreateSemaphoreA
ExitProcess
GetLastError
GetCurrentProcessId
GetModuleHandleA
CreateFileA
GetCommandLineW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
user32
GetMessageTime
PostMessageA
GetWindow
wsprintfA
CreateDialogParamA
MessageBoxA
GetSysColor
GetDialogBaseUnits
GetDoubleClickTime
GetMessagePos
GetActiveWindow
SetCapture
EndMenu
GetClassInfoExA
GetCaretBlinkTime
GetSystemMetrics
RegisterClassA
OpenClipboard
SetDoubleClickTime
ReleaseCapture
ole32
CoUninitialize
CoFreeAllLibraries
CoInitialize
shell32
CommandLineToArgvW
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ