Static task
static1
Behavioral task
behavioral1
Sample
ddd69360ebf940c586ef65936f0b03674e0edd7c57b2f723f479be3072c4aed0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ddd69360ebf940c586ef65936f0b03674e0edd7c57b2f723f479be3072c4aed0.dll
Resource
win10v2004-20220812-en
General
-
Target
ddd69360ebf940c586ef65936f0b03674e0edd7c57b2f723f479be3072c4aed0
-
Size
62KB
-
MD5
f40b257ef5469e6c22579efcd85e5773
-
SHA1
2122ac8532e93fa3875b9629e9cd32345446b86e
-
SHA256
ddd69360ebf940c586ef65936f0b03674e0edd7c57b2f723f479be3072c4aed0
-
SHA512
8b0efc5fc0447efabda7edbb7689652bcddebbdf957876177ed6a371f451d7171adff4a1b41b1ddf0a5efe90e3f3434eb97849c2a706170c156d4bd15cc643e7
-
SSDEEP
768:sqcsJzCHstbxfniNvmYAVFiprNN58uliZ+0cGoGbmx1GLlKMPoJKMlkjCW/xOHZQ:s0JRni5mtatJhcYGo4hfP4ejlw/+t
Malware Config
Signatures
Files
-
ddd69360ebf940c586ef65936f0b03674e0edd7c57b2f723f479be3072c4aed0.dll windows x86
ceca7d0a6cccd2ca29f493a594f72165
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetTickCount
VirtualProtect
GetVersion
ReadFile
CreateMailslotW
CloseHandle
WriteFile
CreateFileW
GetComputerNameW
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
CompareStringW
lstrlenW
GetStdHandle
FormatMessageW
LocalFree
GetConsoleOutputCP
WideCharToMultiByte
GetThreadLocale
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
TerminateProcess
msvcrt
__CxxFrameHandler
_except_handler3
memset
_iob
_memicmp
_errno
fflush
fprintf
wcstoul
wcstol
wcstok
_initterm
free
malloc
_adjust_fdiv
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ