Static task
static1
Behavioral task
behavioral1
Sample
ffdac527cc012766f0941822437bc7726b7671a5b035b32266d102a7486b6e1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffdac527cc012766f0941822437bc7726b7671a5b035b32266d102a7486b6e1f.exe
Resource
win10v2004-20220812-en
General
-
Target
ffdac527cc012766f0941822437bc7726b7671a5b035b32266d102a7486b6e1f
-
Size
32KB
-
MD5
48c3f34a605e7608139e81ceb4385170
-
SHA1
03453d6b7fe6664d4fcf819fd20cf9f2bcebd162
-
SHA256
ffdac527cc012766f0941822437bc7726b7671a5b035b32266d102a7486b6e1f
-
SHA512
ec31d5562634725c789212bed6c6323d8d675c9a2805d2dc11e5e69341506c0b101a9fa2299df4f81fd3500e2ad108843ec73c97af59b7512be3e8639119baef
-
SSDEEP
768:M3M9xMZ0im78cZFQaaTujReZjjKSsXyqiadXnJ:M89e0h7z+u1w4CZaNJ
Malware Config
Signatures
Files
-
ffdac527cc012766f0941822437bc7726b7671a5b035b32266d102a7486b6e1f.exe windows x86
a1461efa6059dc6e158f18504743c166
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
PostMessageA
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DispatchMessageA
kernel32
DeviceIoControl
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
ReadFile
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
GetProcessHeap
IsValidCodePage
SetEnvironmentVariableA
wtsapi32
WTSEnumerateProcessesA
WTSEnumerateServersA
WTSLogoffSession
WTSQuerySessionInformationA
WTSSetSessionInformationA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ