Static task
static1
Behavioral task
behavioral1
Sample
ffb853f6cdcadc9233213c0b79bb7a5e8bc65801b5afbc8a74370cebd2ac7e3a.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
ffb853f6cdcadc9233213c0b79bb7a5e8bc65801b5afbc8a74370cebd2ac7e3a.exe
Resource
win10v2004-20220721-en
General
-
Target
ffb853f6cdcadc9233213c0b79bb7a5e8bc65801b5afbc8a74370cebd2ac7e3a
-
Size
6.5MB
-
MD5
eec77cef2cdf57a824fac4670d69b2e6
-
SHA1
f1834146df5511a7fad5745705d32b1b03d31ff8
-
SHA256
ffb853f6cdcadc9233213c0b79bb7a5e8bc65801b5afbc8a74370cebd2ac7e3a
-
SHA512
ff774d9d0d93fb866bf298e7119a725bbeacf3b31d2c1f7a53f620e51489e5a376fb8b23530534f0a9de7829a9205dc22093237ab478f94008cf2b7167b29e70
-
SSDEEP
98304:qThU72rcKUIm3M7YvqWoam7oZhkoYQO3Rk1UDHouuTrcoKzdC2d/q2Zc:Ohi2vrWoHEkoYTBkCHo/nUpJi
Malware Config
Signatures
Files
-
ffb853f6cdcadc9233213c0b79bb7a5e8bc65801b5afbc8a74370cebd2ac7e3a.exe windows x86
de52e517aa6610567ea74e82b6ba654b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
MoveFileA
VirtualProtect
CallNamedPipeW
SetSystemPowerState
SetTimeZoneInformation
WaitForDebugEvent
EnumResourceNamesW
GetFileInformationByHandle
GetFileAttributesA
DeleteFileA
GlobalAlloc
GetProcAddress
GetFileSize
VerSetConditionMask
GetTapeStatus
FindNextVolumeW
MoveFileW
FlushFileBuffers
CreateFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EncodePointer
RaiseException
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
GetProcessHeap
SetFilePointerEx
WriteConsoleW
ReadConsoleW
HeapSize
HeapReAlloc
DecodePointer
msimg32
TransparentBlt
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ