Behavioral task
behavioral1
Sample
cff4bdbf0ed1b324aa9691af0c0819bf0140ade95384557f546acc01af3d8326.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
cff4bdbf0ed1b324aa9691af0c0819bf0140ade95384557f546acc01af3d8326.exe
Resource
win10-en-20211208
General
-
Target
cff4bdbf0ed1b324aa9691af0c0819bf0140ade95384557f546acc01af3d8326
-
Size
844KB
-
MD5
1f7437497eda90b06489fdc2328bb8ae
-
SHA1
1549c37da035f3c985cf59280eeaf7a0a424289f
-
SHA256
cff4bdbf0ed1b324aa9691af0c0819bf0140ade95384557f546acc01af3d8326
-
SHA512
db747e1800d854b82dafbd59ba4bba0fc23734a868a9ee82f3cfeb2313f09265e7225042676b853f97c8161d6eedd676aea6683f1bfbec9f10d85df78c310f13
-
SSDEEP
12288:aA+QuYAS3W3e85ZqFfbIKGgiNz4uJL3g+AjZWQcpWFYK9751tjxB88888888888:aAXuYAS31SSdozJx3g+Ajsg97L
Malware Config
Signatures
Files
-
cff4bdbf0ed1b324aa9691af0c0819bf0140ade95384557f546acc01af3d8326.exe windows x64
5580ee65f13d8b16213690661ca25b0a
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
SetErrorMode
GetModuleHandleA
LoadLibraryA
user32
CharNextA
GetClipboardOwner
CharLowerA
GetWindowDC
GetLastActivePopup
CloseDesktop
PaintDesktop
IsCharUpperA
GetClipboardData
IsCharLowerW
GetClipboardViewer
GetProcessWindowStation
IsWindowUnicode
IsClipboardFormatAvailable
LoadIconA
VkKeyScanW
gdi32
FillPath
AbortPath
GetPixelFormat
SwapBuffers
GetBkColor
GetObjectType
DeleteDC
GetBkMode
CreatePatternBrush
GetStretchBltMode
CreateSolidBrush
GetTextAlign
advapi32
RegQueryValueExW
RegOpenKeyW
Sections
.text Size: 781KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ