Static task
static1
Behavioral task
behavioral1
Sample
dd52d130f4e2968cc13543390fd8f70644a4b1716e0fcf4e70da8f96b472b383.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd52d130f4e2968cc13543390fd8f70644a4b1716e0fcf4e70da8f96b472b383.exe
Resource
win10v2004-20220812-en
General
-
Target
dd52d130f4e2968cc13543390fd8f70644a4b1716e0fcf4e70da8f96b472b383
-
Size
147KB
-
MD5
93a376abc6937c9ffefa86d9cd3c1314
-
SHA1
b38711494ade1fb3ca5111c8149e187c5c8776a6
-
SHA256
dd52d130f4e2968cc13543390fd8f70644a4b1716e0fcf4e70da8f96b472b383
-
SHA512
7d677ad5d52e8c5cdae550e183eb0d987b2ab5ae5fa6817ee8e6bded9767f42a6b19c09633480711f2a329758d90a1c5f8f1cf2ebf39b615ced95a40e3ea4e50
-
SSDEEP
3072:GSIwhPgw5UPazNKc0QrXfYjkc647NwN1hV393dlbKEhJ:GSIwhPZzkclp4R4ntjlz
Malware Config
Signatures
Files
-
dd52d130f4e2968cc13543390fd8f70644a4b1716e0fcf4e70da8f96b472b383.exe windows x86
9537942565b54b968335990b0d51cc9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrcmpA
HeapAlloc
GetCPInfo
GetCommandLineA
GetStringTypeA
GetModuleFileNameA
WideCharToMultiByte
GetLocalTime
Sleep
lstrcpynA
lstrcatA
GetLastError
GetFileAttributesA
GetLastError
GetLogicalDrives
GlobalAlloc
ExitProcess
GetOEMCP
GlobalAlloc
GetOEMCP
lstrcpynA
GetOEMCP
GetFileAttributesA
GetOEMCP
HeapFree
GetOEMCP
GetLastError
GetOEMCP
GetFileSize
GetOEMCP
GetCommandLineW
GetOEMCP
DeleteFileA
GetOEMCP
GetModuleFileNameA
GetOEMCP
GetCommandLineA
user32
DialogBoxParamA
CopyImage
GetWindowTextA
DrawIcon
AppendMenuA
GetWindowTextLengthA
EndDialog
DrawIconEx
GetFocus
LoadCursorA
CreateIcon
CloseWindow
IsWindow
LoadMenuA
DialogBoxParamW
DrawTextA
CalcMenuBar
DialogBoxParamW
AppendMenuA
InsertMenuA
CloseWindow
IsMenu
GetWindowTextA
IsWindow
AlignRects
GetFocus
CopyRect
CopyImage
GetWindowTextLengthA
LoadCursorA
AppendMenuW
EndDialog
BlockInput
CalcMenuBar
LoadMenuA
DrawTextA
Sections
.tdxt Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddta Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idada Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ