Static task
static1
Behavioral task
behavioral1
Sample
dd176217eb7ebca455b71f37f91b376cc76381b9b5cfc468e61335be3fdea984.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd176217eb7ebca455b71f37f91b376cc76381b9b5cfc468e61335be3fdea984.exe
Resource
win10v2004-20220812-en
General
-
Target
dd176217eb7ebca455b71f37f91b376cc76381b9b5cfc468e61335be3fdea984
-
Size
114KB
-
MD5
0ebe81b36682d59eee3cbe3f334e07c2
-
SHA1
32eb805dd40f865a3dd329f00f8ea166c7c453f4
-
SHA256
dd176217eb7ebca455b71f37f91b376cc76381b9b5cfc468e61335be3fdea984
-
SHA512
9d8d80eedfc2710cddf8eb1407c7bdde6a7981c21ccbdfd9047c2860190b0938a0d93a8f6c2115b9732d26c35c1dee19cb4b8244433e7d4d6a05152126641546
-
SSDEEP
3072:bGfyy0I6cyAF0QhAGps9e3VxuvbIrWqa:yDKA68AGps9e3VxuvbIru
Malware Config
Signatures
Files
-
dd176217eb7ebca455b71f37f91b376cc76381b9b5cfc468e61335be3fdea984.exe windows x86
04f321ebbdc56f486304ea86b285fce3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
ws2_32
gethostbyname
inet_ntoa
gethostbyaddr
WSAStartup
inet_addr
sendto
wininet
DeleteUrlCacheEntry
advapi32
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
LookupPrivilegeValueA
msvcrt
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
calloc
malloc
realloc
memcpy
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
__p__commode
srand
rand
_snprintf
fopen
fprintf
fclose
memset
strstr
strcmp
sprintf
strcpy
strcat
strncpy
strlen
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_CxxThrowException
wcslen
strncat
_vsnprintf
atoi
system
_except_handler3
fgets
__CxxFrameHandler
strtok
sscanf
kernel32
GetModuleFileNameA
VirtualAllocEx
WriteProcessMemory
OpenProcess
lstrcmpiA
InterlockedDecrement
GetModuleHandleA
GetCurrentProcess
FreeLibrary
ReadFile
IsBadReadPtr
TerminateProcess
GetCurrentProcessId
GetTickCount
WideCharToMultiByte
LocalFree
CreateRemoteThread
Process32Next
ExitThread
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpyA
lstrlenA
GetCurrentThread
GetLastError
CreateFileA
GetFileSize
CloseHandle
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Sleep
ExpandEnvironmentStringsA
GetVersionExA
GetStartupInfoA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
user32
keybd_event
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
VkKeyScanA
SetFocus
SetForegroundWindow
CharUpperBuffA
SetRect
SendMessageA
GetWindowThreadProcessId
FindWindowA
CharLowerBuffA
ClipCursor
MessageBoxA
IsWindow
msvcp60
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
ntdll
NtQuerySystemInformation
ZwSystemDebugControl
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ