Static task
static1
Behavioral task
behavioral1
Sample
ff7754ffba8894e85adb80d14395932c19d135fdcd3dc07b224b99ed69a57632.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff7754ffba8894e85adb80d14395932c19d135fdcd3dc07b224b99ed69a57632.exe
Resource
win10v2004-20220812-en
General
-
Target
ff7754ffba8894e85adb80d14395932c19d135fdcd3dc07b224b99ed69a57632
-
Size
439KB
-
MD5
727aa32cab862c70d68b8da71ec2da80
-
SHA1
a49ce811cc73924359a96ef9697914c3a22d7981
-
SHA256
ff7754ffba8894e85adb80d14395932c19d135fdcd3dc07b224b99ed69a57632
-
SHA512
014227cace4188b06b4e968ee9412b98383c8e3b6a098707b88b4156505a7e8aeac779e08125ba4814fb81bb78c92bf7748b99b2744d4e37f0ef104444556405
-
SSDEEP
6144:D6rQZvxKRAq6vK+ePdHLUanOQleUS1iO0s61pM+bqLUP8TtttttttttttttttttB:m8Z5KRfd+eNBlFS1iFk+OIP8pmzPDKrR
Malware Config
Signatures
Files
-
ff7754ffba8894e85adb80d14395932c19d135fdcd3dc07b224b99ed69a57632.exe windows x86
2aa2c53955621abef5f9d8330904197c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHTestTokenMembership
SHCreateProcessAsUserW
user32
GetDesktopWindow
kernel32
GetCurrentThread
GetCommandLineW
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE