Static task
static1
Behavioral task
behavioral1
Sample
ff23b5b22260f967ab503e64ab4c8951276df6aa9337ec4710a0115efbb076e0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff23b5b22260f967ab503e64ab4c8951276df6aa9337ec4710a0115efbb076e0.exe
Resource
win10v2004-20220901-en
General
-
Target
ff23b5b22260f967ab503e64ab4c8951276df6aa9337ec4710a0115efbb076e0
-
Size
752KB
-
MD5
68e08cc8d685a5ff220a02cd604be1e9
-
SHA1
e546d16aaa4ff5861dbd3e3d59241a1ef55a1f8a
-
SHA256
ff23b5b22260f967ab503e64ab4c8951276df6aa9337ec4710a0115efbb076e0
-
SHA512
a98f69daf63cccf6cb505b99101386721d67cb1be5bde5df8957c1bd00db95493fbf9e6727d1497500c5eae2698f8bb85c8ef882b08afe61d174f12cb01cb9ef
-
SSDEEP
12288:EKF5hVL+alUXvw0xunQ8vM3Hz+IedR/aZk7cM9E6GWsW3QbGZZiQ65ls0W9+fo4e:1FT0DXvz06efCucAEzWsWgGZZiT5yr9l
Malware Config
Signatures
Files
-
ff23b5b22260f967ab503e64ab4c8951276df6aa9337ec4710a0115efbb076e0.exe windows x86
ef9aac27038f3041347f9ed0cfe44992
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
FindResourceExA
OpenEventA
CloseHandle
GetStartupInfoA
HeapCreate
lstrlenW
SetEvent
CreateSemaphoreW
FindClose
ReleaseMutex
ExitProcess
GetCommandLineW
CloseHandle
HeapDestroy
GetVersion
SuspendThread
DeleteFileA
GetModuleHandleA
WriteConsoleA
user32
CreateIcon
PeekMessageA
GetClassInfoA
GetKeyState
GetWindowLongA
CallWindowProcW
DispatchMessageA
DrawTextW
SetFocus
DispatchMessageA
IsZoomed
GetSysColor
FindWindowA
docprop
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ