Static task
static1
Behavioral task
behavioral1
Sample
ddab60086a613095494420f86cce85ac82dfbe42d3950284ac3852e6cb18d95b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddab60086a613095494420f86cce85ac82dfbe42d3950284ac3852e6cb18d95b.exe
Resource
win10v2004-20220812-en
General
-
Target
ddab60086a613095494420f86cce85ac82dfbe42d3950284ac3852e6cb18d95b
-
Size
12KB
-
MD5
8bb37c38e3622bc4fa4542bf1cbff4b4
-
SHA1
40451df3938a829e6bacc0f833b213ed488f03e5
-
SHA256
ddab60086a613095494420f86cce85ac82dfbe42d3950284ac3852e6cb18d95b
-
SHA512
0f2e033b4f1e561ed099e6d24cbe468a724a803a9dd41d1e14165867e03056ce6240a9cfd1258254bdfc0765eb91649730bbc043d9c9da8588b3a891877605b0
-
SSDEEP
192:eV3hsZDxbVewxopw1ONQjRm5Uhq9nG1xxLXLO6pF0qw3:eODnewxop/OY2hqiNvw3
Malware Config
Signatures
Files
-
ddab60086a613095494420f86cce85ac82dfbe42d3950284ac3852e6cb18d95b.exe windows x86
f396d3efa0b44d81eac20518c3e7bfe2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
Module32First
Process32Next
LocalAlloc
DeviceIoControl
CreateToolhelp32Snapshot
Sleep
GetVersionExA
WinExec
CloseHandle
LocalFree
lstrcpyA
Process32First
FreeLibrary
lstrcmpA
GetModuleHandleA
Module32Next
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
advapi32
RegEnumKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 322B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ