Static task
static1
Behavioral task
behavioral1
Sample
ddf02fb74806ef914d4513cf8a25bad960569d75bb159fa2f72a876a361f6a57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddf02fb74806ef914d4513cf8a25bad960569d75bb159fa2f72a876a361f6a57.exe
Resource
win10v2004-20220812-en
General
-
Target
ddf02fb74806ef914d4513cf8a25bad960569d75bb159fa2f72a876a361f6a57
-
Size
818KB
-
MD5
2bff7b66db3a6c19c1b4001055a57334
-
SHA1
8a7b6e2c1e28f97ee76c38319c6df1dd4f6c7fe7
-
SHA256
ddf02fb74806ef914d4513cf8a25bad960569d75bb159fa2f72a876a361f6a57
-
SHA512
49f853da282d71915cb56caa773e4b6f48c2b1661f1e99b0b11ab18f43b8b226faed5104f85434e758550417f86f3688c60743ea0403b0e0d1562fdbcbfa1ea7
-
SSDEEP
24576:AUNq1+vfsPebyRjXUG4lr3f79ufMQGdoVMqnxKEoCpBE:AU01+fNbyyG4ZPpzleV7s
Malware Config
Signatures
Files
-
ddf02fb74806ef914d4513cf8a25bad960569d75bb159fa2f72a876a361f6a57.exe windows x86
f0510384f50483ac6ef0e9c8244b553f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrcpynA
lstrcpynA
lstrcpynA
VirtualFree
lstrcmpW
GetVolumeInformationA
lstrcpynA
SetThreadPriority
WriteFile
lstrcpynA
GetCurrentThreadId
Heap32First
GetPrivateProfileIntA
lstrcpynA
GetFileType
lstrcpynA
VirtualProtectEx
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
GetDriveTypeA
ReadConsoleA
FindFirstVolumeA
lstrcpynA
lstrcatA
OpenMutexW
GetDiskFreeSpaceW
GetSystemTime
cmdial32
RasCustomDial
RasCustomDialDlg
InetDialHandler
AutoDialFunc
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ