Static task
static1
Behavioral task
behavioral1
Sample
1ff2fde994cd9791215a0c39e9611caf7b8ec449d2d82b6802ea1b08dd7d6245.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ff2fde994cd9791215a0c39e9611caf7b8ec449d2d82b6802ea1b08dd7d6245.exe
Resource
win10v2004-20220812-en
General
-
Target
1ff2fde994cd9791215a0c39e9611caf7b8ec449d2d82b6802ea1b08dd7d6245
-
Size
144KB
-
MD5
39b3cdbe592fbfce5b7bca5eb66f009a
-
SHA1
5445a005346ec9b514c29371cbd18eed660abf14
-
SHA256
1ff2fde994cd9791215a0c39e9611caf7b8ec449d2d82b6802ea1b08dd7d6245
-
SHA512
0b0f00a6a5bd9defae9b3bf8882a5563f9411b2ac6ac5f62adda89a7d68613be17efea091d6e8bc64e69b1e6e950b20e4e3e43dcc28d8c84b1959d29310b0394
-
SSDEEP
3072:quKay2UNgieWnK80r5K8rbTx81JI/21AiXslNko4:quKawsvEKb181DAu
Malware Config
Signatures
Files
-
1ff2fde994cd9791215a0c39e9611caf7b8ec449d2d82b6802ea1b08dd7d6245.exe windows x86
824804c3d8a1287a7ffb5bb3a7ee92d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetLocalTime
FindClose
FreeResource
FindAtomW
CopyFileA
AddAtomA
ReadFile
GetCommandLineA
AddAtomW
OpenFileMappingA
FatalExit
GlobalFree
CopyFileExA
ExitThread
GetCPInfo
DeleteAtom
GetFileTime
OpenFileMappingA
CopyFileExA
OpenFile
GetCPInfo
DeleteFileW
GetFileTime
GetPriorityClass
CopyFileA
FlushFileBuffers
FreeResource
AddAtomW
FatalExit
FindAtomA
DeleteAtom
CopyFileExW
GetCommandLineA
ReadFile
GetFileType
FindClose
ExitThread
GetLastError
CreateDirectoryA
FindAtomW
AddAtomA
ExitProcess
GlobalFree
GetLocalTime
GetLastError
FindAtomA
FatalExit
GetFileType
FindClose
CreateDirectoryA
DeleteFileA
CopyFileA
WriteFile
GetCommandLineA
AddAtomW
OpenFile
GetCPInfo
ReadFile
FindAtomW
FreeResource
GetFileTime
GetFileTime
DeleteFileA
DeleteFileW
ReadFile
CopyFileExW
OpenFileMappingA
FindClose
CopyFileA
ExitProcess
DeleteAtom
FindAtomW
CreateDirectoryA
FindAtomA
Sections
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 105KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ