Static task
static1
Behavioral task
behavioral1
Sample
dd3bbfa27cc1ee39625056e992a2e6bfc91654f0bca7accbf5af2d5586fb4874.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd3bbfa27cc1ee39625056e992a2e6bfc91654f0bca7accbf5af2d5586fb4874.exe
Resource
win10v2004-20220812-en
General
-
Target
dd3bbfa27cc1ee39625056e992a2e6bfc91654f0bca7accbf5af2d5586fb4874
-
Size
125KB
-
MD5
9b4f8317630d97b1486086648d0359b0
-
SHA1
2a9fa540c5d75623c4b246c41b73dbba80898032
-
SHA256
dd3bbfa27cc1ee39625056e992a2e6bfc91654f0bca7accbf5af2d5586fb4874
-
SHA512
1d71574fe45a2479c668f4edba57a76ab01206e4c1b6a15756c761a0720391505e463111178079f23e1a9ced90d8c5050d806b38b5b345aeccaac7b3f24ec1a4
-
SSDEEP
1536:eBRXa6CD4VvaY6YYyKpsLwFQX17LatWzGR1tMNoO49cId1M8qq8+LpvqPtWR8iHL:eBRXa68cKU+4La7RUZ4A+9v5RdHSO
Malware Config
Signatures
Files
-
dd3bbfa27cc1ee39625056e992a2e6bfc91654f0bca7accbf5af2d5586fb4874.exe windows x86
11ec931bb8880c04aef9be47c0d96949
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
CreateProcessW
GetLastError
GetProcAddress
LoadLibraryA
ExitProcess
FindResourceW
LoadResource
SizeofResource
LockResource
wsock32
htons
bind
listen
gethostbyname
accept
WSAStartup
connect
shutdown
closesocket
recv
send
socket
rasapi32
RasSetEntryPropertiesW
RasEnumDevicesW
RasGetEntryDialParamsW
RasDialW
advapi32
CloseServiceHandle
OpenServiceW
CreateServiceW
OpenSCManagerW
StartServiceW
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ