Static task
static1
Behavioral task
behavioral1
Sample
deedddbd079c92cfefae32d7723cdad11e1c7e0764612908882e5f7e937ebde6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
deedddbd079c92cfefae32d7723cdad11e1c7e0764612908882e5f7e937ebde6.exe
Resource
win10v2004-20221111-en
General
-
Target
deedddbd079c92cfefae32d7723cdad11e1c7e0764612908882e5f7e937ebde6
-
Size
356KB
-
MD5
4b77280566f4a3c3c1bb7bb43aa6541c
-
SHA1
9f442f73f877018e207b8718f26fa74b9d8af8cf
-
SHA256
deedddbd079c92cfefae32d7723cdad11e1c7e0764612908882e5f7e937ebde6
-
SHA512
6c68a9298c304f95ccfae01dc0250974bc08837d8fcc957652b0bc5a445c267d272123d36b26d7bb3a48183e3ca4c3c609eca35ebae0c63d21fa816740f58c8d
-
SSDEEP
6144:2wMVWVP8NQ+dMD1hwwcHOokoTxvGpyhZ+Uam6iOsB7RcMI1kGykVrr06NyfOA79t:2wMVWVENLS0wI1nVRVIlyGr/I3
Malware Config
Signatures
Files
-
deedddbd079c92cfefae32d7723cdad11e1c7e0764612908882e5f7e937ebde6.exe windows x86
fe97c849709d03a3148d4b8fc6e9bbc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcessHeap
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
LoadLibraryW
LocalFree
GetTimeFormatW
GetDateFormatW
InterlockedDecrement
DeviceIoControl
CreateFileW
WriteFile
InterlockedCompareExchange
OutputDebugStringA
VirtualAlloc
GetEnvironmentStrings
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
DisableThreadLibraryCalls
ExitProcess
VirtualFree
GetTickCount
GetStdHandle
LocalAlloc
InitializeCriticalSectionAndSpinCount
GetSystemTime
SetEnvironmentVariableW
CreateEventA
IsDebuggerPresent
GetCurrentProcessId
SetConsoleTitleW
InterlockedIncrement
DeleteTimerQueueEx
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetSystemInfo
LCMapStringA
GetSystemTimeAsFileTime
CloseHandle
VirtualProtect
TlsGetValue
GetCommandLineA
QueryPerformanceCounter
HeapSize
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
InterlockedExchange
VirtualQuery
GetProcAddress
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
user32
SystemParametersInfoW
SendMessageW
DestroyIcon
wsprintfW
IntersectRect
LoadStringW
GetSysColor
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ole32
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 545KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ