Static task
static1
Behavioral task
behavioral1
Sample
dd3b26f9bc8b860e9cf945b640dba0c1084b8277da7b0efe776373a9a1907386.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd3b26f9bc8b860e9cf945b640dba0c1084b8277da7b0efe776373a9a1907386.exe
Resource
win10v2004-20220812-en
General
-
Target
dd3b26f9bc8b860e9cf945b640dba0c1084b8277da7b0efe776373a9a1907386
-
Size
22KB
-
MD5
9dba6f5af42f1cfc10845665380c85b8
-
SHA1
39d3e91666a65d3ef7708dd2ca9d2e5df666a546
-
SHA256
dd3b26f9bc8b860e9cf945b640dba0c1084b8277da7b0efe776373a9a1907386
-
SHA512
0fe8c00f37d0a4abe74b06d7071b8609aeb6f429c5286b062804a785c74f153d6234b9a2e19727dea5f2ea5f7b207484062395eb7eb3820d03bb89303358a66a
-
SSDEEP
384:N3XVFAz1zpQmvvAI4lBlSfMIwIrr+3rjYE0WVQEWqwQ1c6:N3TU1zpQmvv4lWfMIw++0/tQ
Malware Config
Signatures
Files
-
dd3b26f9bc8b860e9cf945b640dba0c1084b8277da7b0efe776373a9a1907386.exe windows x86
4d8ccef4e322e12ec43f159c3390c177
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetPriorityClass
GetCurrentProcess
CloseHandle
GetLastError
CreateMutexA
ExitProcess
WinExec
CopyFileA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
ResumeThread
CreateThread
Sleep
WriteFile
CreateFileA
lstrcatA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileExA
GetSystemDirectoryA
GlobalMemoryStatus
GetVersionExA
GetComputerNameA
GetCurrentProcessId
HeapAlloc
GetProcessHeap
RaiseException
InterlockedExchange
LocalAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
msvcp60
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
msvcrt
sprintf
malloc
printf
_stricmp
strstr
rand
__CxxFrameHandler
strcspn
strncpy
atoi
_strlwr
_itoa
Sections
.222 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.555 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
../secti Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
... Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
./sectio Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.... Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE