Static task
static1
Behavioral task
behavioral1
Sample
dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7.exe
Resource
win7-20220812-en
General
-
Target
dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7
-
Size
278KB
-
MD5
52f6c31d1417a2aed54bc80a7b8e2b5c
-
SHA1
2c92f113fd4d385ef8d1945bc774f2bcac3f7211
-
SHA256
dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7
-
SHA512
296e557a01bc305850516750a4a1f7044652a952c8f380ad6b6dc59c3b1658e07030c2e3373c4718720971c44ff22b520834eef8f9fab413172de3ba40bb4502
-
SSDEEP
6144:LbYJKTU3oCUI8y+tTVB9pDtF4/hWYq8KG1t4qeiiw:LXIUI8PVLpDtGwYMxi/
Malware Config
Signatures
Files
-
dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7.exe windows x86
5381f0a66dd8a3a75e81bd6394d374e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
shell32
SHGetFolderPathW
shlwapi
StrCmpNIA
StrStrA
iphlpapi
GetIpAddrTable
kernel32
InterlockedIncrement
GetSystemInfo
LeaveCriticalSection
InterlockedDecrement
GlobalAlloc
AddAtomA
SetThreadPriority
EnterCriticalSection
TerminateThread
CreateFileW
GetCurrentProcessId
GetProcAddress
CreateSemaphoreA
ResetEvent
lstrlenA
GetExitCodeThread
GetCurrentThread
GetSystemTime
LockResource
LoadLibraryW
FreeLibrary
GetLastError
Sleep
GetProcessHeap
QueryPerformanceCounter
MultiByteToWideChar
ReleaseSemaphore
EnumResourceTypesW
GetTickCount
IsBadWritePtr
GetGeoInfoA
VirtualFree
DisableThreadLibraryCalls
IsBadReadPtr
WaitForMultipleObjects
GetThreadPriority
VirtualAlloc
HeapFree
FindResourceA
GetModuleFileNameW
ReleaseMutex
CreateMutexA
LoadLibraryA
LoadResource
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
ExitProcess
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 136KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ