Static task
static1
Behavioral task
behavioral1
Sample
2dada472787248e43a4e262fc1b05c6e06815433eb5296a20848fa32bbea5e82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2dada472787248e43a4e262fc1b05c6e06815433eb5296a20848fa32bbea5e82.exe
Resource
win10v2004-20220901-en
General
-
Target
2dada472787248e43a4e262fc1b05c6e06815433eb5296a20848fa32bbea5e82
-
Size
834KB
-
MD5
4d55fb1f5ce7b4038c97ce7c1baa0b6a
-
SHA1
1e53122de9b19ef3e5a9ac3dfbe542463bb0af5e
-
SHA256
2dada472787248e43a4e262fc1b05c6e06815433eb5296a20848fa32bbea5e82
-
SHA512
4dfb536ec76cdd16542f8a58aed9f160f8e773a0e739374d9f62b18413650c3fb244b6f1a5e5ff4ec403d361d4222e1b876ea2eb11326f09473ce10c81721be5
-
SSDEEP
12288:OQeWySm+RSO1wGBOBT9I/XqTitVZCCl9N3XY2FDySP31QNoKvjw/VH9gbpt8yk4l:2WaMDUBKPVRHY2Fd1irvjYda9tvzm
Malware Config
Signatures
Files
-
2dada472787248e43a4e262fc1b05c6e06815433eb5296a20848fa32bbea5e82.exe windows x86
97f36f92d1e41a55a2ae0300e795659a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetKeyboardType
MessageBoxA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
comdlg32
GetSaveFileNameA
uuwisehelper
uu_getScoreA
Sections
CODE Size: - Virtual size: 746KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 824KB - Virtual size: 823KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ