Static task
static1
Behavioral task
behavioral1
Sample
ddd19777282159c1008e6ef49b714db543ecd71ecd89cf028fba4f1ac471ad33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddd19777282159c1008e6ef49b714db543ecd71ecd89cf028fba4f1ac471ad33.exe
Resource
win10v2004-20220812-en
General
-
Target
ddd19777282159c1008e6ef49b714db543ecd71ecd89cf028fba4f1ac471ad33
-
Size
258KB
-
MD5
5d21cedf2630824d35e745f24c9a94bb
-
SHA1
3f3ee78740a7605fb67c4950d3842ec9ad8dfffb
-
SHA256
ddd19777282159c1008e6ef49b714db543ecd71ecd89cf028fba4f1ac471ad33
-
SHA512
62f50f6dd10ec8380f4e30f554bfc547cb06f03a656848171af5f66adffaa83eac6cab3e40fa633f725e5020d4a2024a45c8b90de75624c4280cd8407af903b1
-
SSDEEP
6144:YSw3uQUDFJSbFXOGbgfnLfx15b805zU9CXsj:fw3uQUDbYesgfntny9C8j
Malware Config
Signatures
Files
-
ddd19777282159c1008e6ef49b714db543ecd71ecd89cf028fba4f1ac471ad33.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 244KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE