Static task
static1
Behavioral task
behavioral1
Sample
ff32d63102034488549acf359b66105c1e7e099b9388f36309c2532788eaac0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff32d63102034488549acf359b66105c1e7e099b9388f36309c2532788eaac0f.exe
Resource
win10v2004-20220812-en
General
-
Target
ff32d63102034488549acf359b66105c1e7e099b9388f36309c2532788eaac0f
-
Size
496KB
-
MD5
6f4274ac012fbd753fce8338399d00b0
-
SHA1
18bda64d58041653c42d3542b7305edaedceb098
-
SHA256
ff32d63102034488549acf359b66105c1e7e099b9388f36309c2532788eaac0f
-
SHA512
f88b41503fff1086286667522bc237b526dae16d86fc1729bafc1464d70dbce3834711b296d2b294b2684e1865b0651f630a4e5ba1f8b92a64cc4d95fda56477
-
SSDEEP
12288:a7Fu10nmntYj57w+YBvhn6UHVBDGuha4qlvibzO:us0nvFQvnljDGuNzO
Malware Config
Signatures
Files
-
ff32d63102034488549acf359b66105c1e7e099b9388f36309c2532788eaac0f.exe windows x86
d84bf797c53f9e2525ba15c8249c3a1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
SetLastError
GetCPInfo
GetLocaleInfoW
FreeLibrary
WideCharToMultiByte
LoadLibraryA
VirtualFree
GetModuleFileNameW
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetModuleHandleA
MultiByteToWideChar
GetLastError
GetOEMCP
advapi32
RegQueryValueExA
RegOpenKeyExW
Sections
.gwe5g Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.46hwed Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.etg54g Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.j7254ry Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.h6j46y6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE