Static task
static1
Behavioral task
behavioral1
Sample
ddc30f2616c24c77b9a05aa160392f27bd5bd81e856f3b269af3654a1d2b6939.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ddc30f2616c24c77b9a05aa160392f27bd5bd81e856f3b269af3654a1d2b6939.exe
Resource
win10v2004-20220812-en
General
-
Target
ddc30f2616c24c77b9a05aa160392f27bd5bd81e856f3b269af3654a1d2b6939
-
Size
768KB
-
MD5
7cd2aaf1f003a0f23bef8a22ddf61b3e
-
SHA1
ca9091392d7b624616d66811667a3f76c17feb6d
-
SHA256
ddc30f2616c24c77b9a05aa160392f27bd5bd81e856f3b269af3654a1d2b6939
-
SHA512
7138f9096277861295317927cd18c25caece7e742e488a79eb2a0e78fb4e300646c017b476df601654713ba4f6c3b6a022544d9d72162d009e316a272745e793
-
SSDEEP
24576:diWtDCAIOzQlK5a1bGVD/rCEtiEDd2h1dt:dlDCAIOS1bQDrCEJEh
Malware Config
Signatures
Files
-
ddc30f2616c24c77b9a05aa160392f27bd5bd81e856f3b269af3654a1d2b6939.exe windows x86
cd760bdcc38d20f1c08c94653d39a52b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
CreateMutexA
CreateSemaphoreA
GetLocalTime
SetLastError
GetStartupInfoA
DeleteFileW
CreateDirectoryW
VirtualProtectEx
GetFileAttributesA
LoadLibraryA
GlobalFree
GetProcessHeap
CloseHandle
CreateHardLinkW
SetLastError
Sleep
SetEvent
ReadConsoleW
lstrlenA
GetTickCount
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcDeleteFilter
TcAddFlow
TcDeleteFlow
TcAddFilter
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE