Static task
static1
Behavioral task
behavioral1
Sample
fffe41ab584489ffeca35de8ba7bdd32e21265e2ea18c2f5664c5f7e307d489a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fffe41ab584489ffeca35de8ba7bdd32e21265e2ea18c2f5664c5f7e307d489a.exe
Resource
win10v2004-20220812-en
General
-
Target
fffe41ab584489ffeca35de8ba7bdd32e21265e2ea18c2f5664c5f7e307d489a
-
Size
199KB
-
MD5
6cab73e79acdff05fe295a0462deab10
-
SHA1
30d487bde2993f0ecbfbfe90c4dee836f33aaeb7
-
SHA256
fffe41ab584489ffeca35de8ba7bdd32e21265e2ea18c2f5664c5f7e307d489a
-
SHA512
b28d95ee2be51e6cff0b1127c2775b048255b52a84062f1e5df8deda0083597a396d853c5bc4ae38b6fbc0f25c35087d328363e3c85007c65273322536763f84
-
SSDEEP
6144:kAHMu8OQGNA87GdrG6UQh4osBs6Afz6c:kOM3+A87xQhrBr2
Malware Config
Signatures
Files
-
fffe41ab584489ffeca35de8ba7bdd32e21265e2ea18c2f5664c5f7e307d489a.exe windows x86
0078315845a5f246920cf819c6246602
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
GetStringTypeW
WriteConsoleW
OutputDebugStringA
GetLocaleInfoA
LCMapStringA
EnumSystemLanguageGroupsW
DebugBreak
LCMapStringW
GetTimeZoneInformation
IsValidCodePage
GetStringTypeA
HeapReAlloc
CompareFileTime
OutputDebugStringW
GetCPInfo
oleacc
CreateStdAccessibleObject
CreateStdAccessibleProxyA
winmm
mciSendCommandA
shlwapi
PathAddBackslashW
advapi32
InitializeSecurityDescriptor
QueryServiceStatus
AddAce
SetSecurityDescriptorOwner
PrivilegeCheck
GetUserNameA
LookupAccountSidA
IsValidSecurityDescriptor
GetSecurityDescriptorLength
DuplicateTokenEx
RegOpenKeyExW
shell32
SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ