Static task
static1
Behavioral task
behavioral1
Sample
dd8f0f1fa144886c7bba57485290f8e7b1fe3a5e704a96b8fe03ce2100dbd51b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd8f0f1fa144886c7bba57485290f8e7b1fe3a5e704a96b8fe03ce2100dbd51b.exe
Resource
win10v2004-20220812-en
General
-
Target
dd8f0f1fa144886c7bba57485290f8e7b1fe3a5e704a96b8fe03ce2100dbd51b
-
Size
1.9MB
-
MD5
61ffafdfb47b36ec745cc02d7b298555
-
SHA1
8aeafe797d348ed840b7d50c4367373c2717775c
-
SHA256
dd8f0f1fa144886c7bba57485290f8e7b1fe3a5e704a96b8fe03ce2100dbd51b
-
SHA512
9e06ba01f5abfe78160ab0ce9b2388afc5b925471da7d022d9cb3d1429be076278525b8f197cf1b28c32eda29e3eff26af67512948e14153ea3fd80804b92343
-
SSDEEP
24576:MbBPyXlurlehxqO1fVIesFd8FevQCyLLurzk1/n5SHfwI9/N5W0kpZtUuREY+YO4:4RrUqOsFiFeryfuS/MHYWaLaulOxXIi
Malware Config
Signatures
Files
-
dd8f0f1fa144886c7bba57485290f8e7b1fe3a5e704a96b8fe03ce2100dbd51b.exe windows x86
d8783453cde131a55ec65e42af71268f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
lstrcmpiA
lstrlenA
GetEnvironmentStringsW
LCMapStringA
UnhandledExceptionFilter
GetFileAttributesA
GetCurrentThreadId
CloseHandle
AddAtomA
lstrcmpA
lstrcpynA
GetDiskFreeSpaceA
LeaveCriticalSection
FlushFileBuffers
Sleep
lstrcatA
LoadLibraryA
SetUnhandledExceptionFilter
FindFirstFileA
WriteFile
DeleteCriticalSection
MultiByteToWideChar
EnumResourceNamesW
SetFilePointer
GetStringTypeW
GetProcAddress
GetModuleHandleA
GetOEMCP
GetStringTypeA
EnterCriticalSection
FreeLibrary
lstrcpyA
InitializeCriticalSection
CreateFileA
GetThreadLocale
FreeEnvironmentStringsA
lstrlenW
LCMapStringW
GetStartupInfoA
GetEnvironmentStrings
GetLastError
GetFullPathNameA
SetStdHandle
GetCPInfo
IsBadCodePtr
ReadFile
WideCharToMultiByte
MulDiv
VirtualProtect
FreeEnvironmentStringsW
IsBadReadPtr
GetTickCount
RaiseException
Sections
.text Size: 996KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 949KB - Virtual size: 949KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ