Static task
static1
Behavioral task
behavioral1
Sample
dd3905a693585400ef955debc0100ebdbb0adeade11f5c32fb57f0fb2202b03a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd3905a693585400ef955debc0100ebdbb0adeade11f5c32fb57f0fb2202b03a.exe
Resource
win10v2004-20220901-en
General
-
Target
dd3905a693585400ef955debc0100ebdbb0adeade11f5c32fb57f0fb2202b03a
-
Size
643KB
-
MD5
0661bd58e13c6e509fa020467b5bc3b3
-
SHA1
e9953c94950627e442378bc1be0811594a6ed410
-
SHA256
dd3905a693585400ef955debc0100ebdbb0adeade11f5c32fb57f0fb2202b03a
-
SHA512
51b46930960acf45002f123f91242dd1048e1d36a0d1645a01c9e0a52fea03452b28a70fe15b57057415a48da5c3d8020156e99cc3a86b19c08e9c4b177c440c
-
SSDEEP
12288:WAI+njBLFuCA9lDC0ZSeqJhDLDRnvwmuXzRrE6+RIUm2L6pG:W4NU9lm0keqJhDLJruDiJ
Malware Config
Signatures
Files
-
dd3905a693585400ef955debc0100ebdbb0adeade11f5c32fb57f0fb2202b03a.exe windows x86
1aca31a9ca4c1e7f0fb5b4fd3a50ed91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MoveWindow
PostQuitMessage
IsWindow
GetDC
GetCursorPos
ReleaseDC
SendMessageA
DestroyWindow
GetMessageA
GetParent
UpdateWindow
FillRect
ShowWindow
EnableWindow
SetWindowPos
TranslateMessage
IsWindowEnabled
EnableMenuItem
GetWindowLongA
CreateWindowExA
DispatchMessageA
EndPaint
SetFocus
KillTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
ReleaseCapture
SetWindowLongA
SetWindowTextA
GetSubMenu
GetDlgItem
SetCursor
LoadCursorA
LoadIconA
GetDesktopWindow
SetForegroundWindow
EndDialog
MessageBoxA
DialogBoxParamA
GetSysColor
SystemParametersInfoA
wsprintfA
InvalidateRect
GetClientRect
CallWindowProcA
GetFocus
oleaut32
SysFreeString
SysAllocStringLen
advapi32
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
kernel32
GetConsoleOutputCP
ReleaseMutex
CreateFileMappingA
GetFileAttributesA
WaitForSingleObject
GetDriveTypeA
FindNextFileA
HeapDestroy
GetFileAttributesW
GetLocalTime
FreeEnvironmentStringsA
GetStdHandle
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
CreateFileA
SetErrorMode
FreeEnvironmentStringsW
GetLocaleInfoW
GetTempPathA
lstrcmpiA
GetCPInfo
GetStringTypeA
WriteFile
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCommandLineA
HeapReAlloc
GetStringTypeW
SetEvent
LocalFree
FormatMessageW
GetCurrentProcess
FindClose
LoadResource
InitializeCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
ResetEvent
GetOEMCP
VirtualAlloc
FindResourceA
VirtualFree
UnmapViewOfFile
IsValidCodePage
CreateProcessA
SizeofResource
SetStdHandle
InterlockedExchange
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
Sleep
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
InterlockedIncrement
ExitProcess
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
InterlockedDecrement
FindFirstFileW
CompareStringA
lstrcpyA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
VirtualProtect
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
FormatMessageA
GetExitCodeProcess
gdi32
SetBkColor
CreateFontIndirectA
DeleteObject
GetDeviceCaps
DeleteDC
GetStockObject
CreateCompatibleDC
SelectObject
SetBkMode
BitBlt
msvcrt
_exit
exit
_controlfp
Sections
oikcu Size: 642KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE