Static task
static1
Behavioral task
behavioral1
Sample
fff17bb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fff17bb.exe
Resource
win10v2004-20220812-en
General
-
Target
fff17bb.exe
-
Size
562KB
-
MD5
f6df6abcbd229b78d7942a3adb08450c
-
SHA1
eac034780021ca49836c7247a925776eb0be49bd
-
SHA256
18163f9e52774648c2d70f9bc95f30395cb44d960447eae22bd4a701872b5a85
-
SHA512
d6699a6f3885b860ff79edb5f41cd99b6c470d688835bfe2255fe8ee7d2817f2168f452bdf928617544edf9bbf1cc42875a4ce32d37046a4b996d815e3d11e1c
-
SSDEEP
12288:wxT1kfKNrL/RoCCe30xe2Qd/tfeeRdS3PHz+pMboBwc:okfK5doOj2IVmtvz+mEB
Malware Config
Signatures
Files
-
fff17bb.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ