Static task
static1
Behavioral task
behavioral1
Sample
ddd24d607915f1a1bbb9e90f67c454c1112dab55d44156b2015d8177c8bbb693.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ddd24d607915f1a1bbb9e90f67c454c1112dab55d44156b2015d8177c8bbb693.exe
Resource
win10v2004-20220901-en
General
-
Target
ddd24d607915f1a1bbb9e90f67c454c1112dab55d44156b2015d8177c8bbb693
-
Size
171KB
-
MD5
f636a6f6b9e7a593ed86504cae760633
-
SHA1
7860e2249d874637872ad10d2adebbfdc24e92e0
-
SHA256
ddd24d607915f1a1bbb9e90f67c454c1112dab55d44156b2015d8177c8bbb693
-
SHA512
205d7ed95f88e7636c9e70ef4c16f5f07611850926ee52dec6d393787f3c608ed360c9ce0712f4b613cf82bf632f7eb8a67d483c82f1103943d5c173325fb39b
-
SSDEEP
3072:6kHeo7aYO5gxpzRJEwp07RF56sjeUiwL8iN4F5QxuVOQ0/vV:NH57bl70TaUH8I4gsVk/vV
Malware Config
Signatures
Files
-
ddd24d607915f1a1bbb9e90f67c454c1112dab55d44156b2015d8177c8bbb693.exe windows x86
6917381b2645edc985551c4c06e99be7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetStdHandle
GlobalFree
CreateJobSet
GetTapeStatus
GetCommState
GlobalFlags
ExitProcess
CloseHandle
CreateHardLinkA
GetProfileStringA
FindAtomA
GetVolumePathNameA
VirtualAlloc
GetProcessHeap
GetModuleHandleA
GetUserDefaultLangID
EnterCriticalSection
ClearCommBreak
FormatMessageA
GetOEMCP
user32
GetActiveWindow
BeginPaint
GetWindowTextLengthA
GetForegroundWindow
ShowWindow
GetFocus
EndPaint
ValidateRect
DrawEdge
ReleaseDC
GetWindow
RegisterClassA
GetWindowTextA
GetDC
GetClassInfoExA
GetClassNameA
IsIconic
GetParent
CloseWindow
gdi32
GetColorSpace
ExtCreatePen
CreateDCA
CreateDIBitmap
GetCharWidthA
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ