Static task
static1
Behavioral task
behavioral1
Sample
ddfe37314caeb82714c54db5121820b45f6961df33d407748db1a6e2a91cc056.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ddfe37314caeb82714c54db5121820b45f6961df33d407748db1a6e2a91cc056.exe
Resource
win10v2004-20220812-en
General
-
Target
ddfe37314caeb82714c54db5121820b45f6961df33d407748db1a6e2a91cc056
-
Size
365KB
-
MD5
742387264980d5fd1b4cd321ee9ee417
-
SHA1
40795e7cbb08018ddacdbb5458ac532acb483e10
-
SHA256
ddfe37314caeb82714c54db5121820b45f6961df33d407748db1a6e2a91cc056
-
SHA512
6cccd31fc118eb6eb7cde930c7c61c897ec1fdf866196df3d9ce1cd5c8c77e218334978735021422f77c293fa0b0d6c1211130c2d0bf9cdf7ca2335ab03601b2
-
SSDEEP
6144:LP2TESlM2udjV4tHdf4XNvDO4PlXjBDy5pruk:LGbl+jWd2dDzPlXjAnrf
Malware Config
Signatures
Files
-
ddfe37314caeb82714c54db5121820b45f6961df33d407748db1a6e2a91cc056.exe windows x86
ccb5df500393e593a3247113b5db5a20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
LCMapStringA
GetCurrentProcess
CreateFileA
user32
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA
advapi32
RegEnumKeyA
RegOpenKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegQueryValueA
Sections
.text Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ