Static task
static1
Behavioral task
behavioral1
Sample
ff0a9387f081873961a55e178b770bb15d7be5e6fa86ae96c10c2a9cb8c7b91f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff0a9387f081873961a55e178b770bb15d7be5e6fa86ae96c10c2a9cb8c7b91f.exe
Resource
win10v2004-20220901-en
General
-
Target
ff0a9387f081873961a55e178b770bb15d7be5e6fa86ae96c10c2a9cb8c7b91f
-
Size
141KB
-
MD5
08cd3680c77ec19ec2c7979b4002f0d5
-
SHA1
63124f2e5ce3b689edf07b7ec4f6297823a1a8ba
-
SHA256
ff0a9387f081873961a55e178b770bb15d7be5e6fa86ae96c10c2a9cb8c7b91f
-
SHA512
84d7afd66baaec3098f689be86300e6d588903f3210ddd2e3f82de90b6d840a24a0003f9652168ee930eea76139935ef02f154b572d30763bd21166b9d34de34
-
SSDEEP
3072:JttcarQt7TMOgrcxweQToVFV6qelNJEGJs4xnHIBOpsF0D0zSE9NYRpZwVjdG5uN:JttQ3ghoVFV6qelNJ/sioBFYkSNZwVjp
Malware Config
Signatures
Files
-
ff0a9387f081873961a55e178b770bb15d7be5e6fa86ae96c10c2a9cb8c7b91f.exe windows x86
9357a2352a55bbeefe018168aeda90b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetModuleHandleA
GetProcAddress
CloseHandle
GetTempFileNameA
RtlUnwind
WriteFile
lstrcmpiA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetLastError
lstrlenA
CreateFileA
GetVersionExA
shlwapi
PathGetDriveNumberA
crtdll
__GetMainArgs
exit
raise
signal
shell32
SHGetMalloc
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
gdi32
CreateFontIndirectA
user32
SetWindowLongA
LoadStringA
SendMessageA
GetWindowLongA
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 316B - Virtual size: 316B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ