Static task
static1
Behavioral task
behavioral1
Sample
ddcc81b3f17cda9626258b75e44310700d0a7a769d8c325f026869e3cc60f178.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ddcc81b3f17cda9626258b75e44310700d0a7a769d8c325f026869e3cc60f178.exe
Resource
win10v2004-20220812-en
General
-
Target
ddcc81b3f17cda9626258b75e44310700d0a7a769d8c325f026869e3cc60f178
-
Size
249KB
-
MD5
0a14b0990a2b46419e52c20cce3585df
-
SHA1
c47100c61e02194de286f7fac822d6fb3605e20b
-
SHA256
ddcc81b3f17cda9626258b75e44310700d0a7a769d8c325f026869e3cc60f178
-
SHA512
b367160b9985b9132a433bf787d9702c580f34bd0ffcf5c769dab514dcc17c70f4a17929cd9b3dd95ce4cbc517096d904a0ffe9253e24d7eff8f4be2b84f0239
-
SSDEEP
6144:hUxvZL2kgckUMqogKN5inOziLiCIg1xEJ+Tt6TTNmvNZc1VKVW:8x6kgck32nxOWiJ+56TTwvQKVW
Malware Config
Signatures
Files
-
ddcc81b3f17cda9626258b75e44310700d0a7a769d8c325f026869e3cc60f178.exe windows x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tp0ffip6 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kslbbpsf Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2tbq6ru0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ