Static task
static1
Behavioral task
behavioral1
Sample
dde80bb7fd5f4dde30b7e40d11bf6a9d6e470df049821cf92f8d633c7610f89a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dde80bb7fd5f4dde30b7e40d11bf6a9d6e470df049821cf92f8d633c7610f89a.exe
Resource
win10v2004-20220812-en
General
-
Target
dde80bb7fd5f4dde30b7e40d11bf6a9d6e470df049821cf92f8d633c7610f89a
-
Size
1.5MB
-
MD5
e66b26911cb567af0a4042da226659a4
-
SHA1
1f814f7beaf6e6b78c0e6993af6aa41d8b79ccbd
-
SHA256
dde80bb7fd5f4dde30b7e40d11bf6a9d6e470df049821cf92f8d633c7610f89a
-
SHA512
ea61d2d2ae1c1f66250fd2e3421ec17200965f9f8a9a6181eb630975e06a086eacff7aff9621362779c1ee4b266d436f9a4fd4c57f28937029a3c291e7b5aea4
-
SSDEEP
24576:IU60tla1iGXawiFRgSGWyH31Vz/XRYwR0WUIZx1epT+FBgsAzZ1UQVY:IUttla1xiFRgSREHR9epiF74us
Malware Config
Signatures
Files
-
dde80bb7fd5f4dde30b7e40d11bf6a9d6e470df049821cf92f8d633c7610f89a.exe windows x86
8ad7fd218f1c0545c34bd69b90b773d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dbghelp
MakeSureDirectoryPathExists
psapi
GetModuleFileNameExA
user32
DrawFrameControl
gdi32
GetLayout
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegEnumValueA
shell32
SHAppBarMessage
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
ole32
OleFlushClipboard
oleaut32
SysFreeString
oledlg
ord8
gdiplus
GdipDrawImageRectI
netapi32
Netbios
oleacc
AccessibleObjectFromWindow
wininet
InternetWriteFile
imm32
ImmGetContext
Sections
.text Size: 1.5MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE