Static task
static1
Behavioral task
behavioral1
Sample
dddaff99983c63cddd37f03af6b7fe30cfb4b587e7ce7faeeda7166e965a6d64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dddaff99983c63cddd37f03af6b7fe30cfb4b587e7ce7faeeda7166e965a6d64.exe
Resource
win10v2004-20220812-en
General
-
Target
dddaff99983c63cddd37f03af6b7fe30cfb4b587e7ce7faeeda7166e965a6d64
-
Size
724KB
-
MD5
3d7bcaaae8bdc100f82ee2aa1cc05480
-
SHA1
b3a4811c10e1c1b10021c389566117f6d5f08b37
-
SHA256
dddaff99983c63cddd37f03af6b7fe30cfb4b587e7ce7faeeda7166e965a6d64
-
SHA512
f870a87476eaff5259e9363a430df0a4085d224e299c3c065c93eed40bc6bfe9d28e3df4d40eac86c40df9c81959212db7cabf77bdcf72cbd994d676a4cbb158
-
SSDEEP
12288:6irHozqoROPGO8MPb97rhI9JkrH6TlsPAhxLkMUtt7sFu1tL3MOCi:fIzqoROPGOZvI9Jk7V2xLkMUttoeMOCi
Malware Config
Signatures
Files
-
dddaff99983c63cddd37f03af6b7fe30cfb4b587e7ce7faeeda7166e965a6d64.exe windows x86
900eda7ebcb0d65ad0f34f228dd919e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CreateServiceW
RegConnectRegistryW
CryptGetDefaultProviderW
CryptDestroyHash
LookupSecurityDescriptorPartsW
AbortSystemShutdownW
RevertToSelf
RegQueryValueExA
RegQueryInfoKeyW
RegEnumKeyA
RegFlushKey
RegEnumValueW
ReportEventW
CryptSetProviderA
DuplicateTokenEx
StartServiceA
RegLoadKeyA
LookupPrivilegeDisplayNameW
CryptSignHashW
LookupAccountSidW
RegDeleteValueW
comctl32
ImageList_Add
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_Destroy
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_DragEnter
InitCommonControlsEx
CreateMappedBitmap
shell32
CommandLineToArgvW
ExtractIconExW
user32
MessageBoxW
LoadStringW
CreateWindowExW
WINNLSGetEnableStatus
ChangeMenuA
GetDlgItem
RegisterClassExA
GetSubMenu
CharUpperA
IsCharAlphaA
DefWindowProcW
GetSysColor
ShowWindow
GetActiveWindow
GetSysColorBrush
DdeGetData
SetRect
DefDlgProcW
OpenWindowStationA
DestroyCursor
IsCharLowerW
SendMessageA
LoadMenuW
DestroyWindow
RegisterClassA
kernel32
SetHandleCount
GetFileType
GetModuleFileNameA
TerminateThread
GetOEMCP
LocalAlloc
GetVersionExW
SystemTimeToFileTime
GetStdHandle
CommConfigDialogA
InterlockedIncrement
CreateRemoteThread
GetProcAddress
GetPriorityClass
GetStringTypeW
ReadFile
GetCurrentThreadId
EnumDateFormatsW
GetLastError
CompareStringW
GetVersionExA
UnhandledExceptionFilter
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
ReadFileEx
CreateMutexA
LoadLibraryA
GetACP
SetEnvironmentVariableA
HeapCreate
WideCharToMultiByte
GetVersion
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetCurrentDirectoryW
GetStringTypeA
GetStartupInfoA
GetTimeZoneInformation
GetCommandLineA
SetThreadPriority
WriteConsoleOutputCharacterW
EnterCriticalSection
LCMapStringA
GetCurrentThread
LeaveCriticalSection
GetEnvironmentStrings
GetConsoleCursorInfo
GetPrivateProfileStructW
GetTickCount
FreeEnvironmentStringsA
LCMapStringW
ExpandEnvironmentStringsW
TlsSetValue
OpenMutexA
CloseHandle
CompareStringA
InitializeCriticalSection
HeapReAlloc
RtlUnwind
SetFilePointer
EnumSystemCodePagesA
SetConsoleActiveScreenBuffer
GetConsoleOutputCP
GetSystemTime
GetModuleHandleA
IsBadWritePtr
UnlockFileEx
GlobalCompact
InterlockedDecrement
GetEnvironmentStringsW
VirtualFree
TlsFree
DosDateTimeToFileTime
lstrcpynW
GetCPInfo
DebugActiveProcess
GetFileAttributesA
ExitProcess
GetCurrentProcess
SetLastError
GetUserDefaultLCID
GetFullPathNameW
CreateNamedPipeA
QueryPerformanceCounter
HeapDestroy
MultiByteToWideChar
EnumResourceLanguagesW
WriteFileEx
VirtualAlloc
WriteFile
FreeEnvironmentStringsW
GetLocalTime
DeleteFileA
InterlockedExchange
HeapFree
GetSystemTimeAsFileTime
FindClose
TlsAlloc
lstrcpynA
GetCurrentProcessId
SetStdHandle
VirtualQuery
GetFileAttributesExA
TerminateProcess
RtlFillMemory
HeapAlloc
RaiseException
TlsGetValue
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ