Static task
static1
Behavioral task
behavioral1
Sample
0ffb424fa2ee47cb87a3233a477c80a49d07cdc6abb5bb25bca64e02e0d51bf2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0ffb424fa2ee47cb87a3233a477c80a49d07cdc6abb5bb25bca64e02e0d51bf2.exe
Resource
win10v2004-20220812-en
General
-
Target
0ffb424fa2ee47cb87a3233a477c80a49d07cdc6abb5bb25bca64e02e0d51bf2
-
Size
192KB
-
MD5
87e9260964c742b7b24f8e02f23273b1
-
SHA1
e6bf0e0d0096ea8ebdb0779fb96d56aa87d12f72
-
SHA256
0ffb424fa2ee47cb87a3233a477c80a49d07cdc6abb5bb25bca64e02e0d51bf2
-
SHA512
6ad695161468407a331af7cf00db5236609f991981358d81c210e3091a5c19796c1de9399e72d102c960aba5bb436c805786f0af63d2b8ec0cba528bf4be68b8
-
SSDEEP
3072:5nNcQnzzoyvxHXoNvnBx7O+ZI2X9pAMLXS2sS:5f4EYnbzNXXLi2s
Malware Config
Signatures
Files
-
0ffb424fa2ee47cb87a3233a477c80a49d07cdc6abb5bb25bca64e02e0d51bf2.exe windows x86
bc7b0993941f138f0c5c47b6fa6ff174
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetSystemTime
GetTickCount
GetVersionExA
OutputDebugStringA
Sleep
GetModuleFileNameA
GetDateFormatA
FileTimeToSystemTime
GetTimeFormatA
GetSystemTime
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
CreateFileA
FlushFileBuffers
DeleteFileA
GetLocalTime
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CloseHandle
HeapFree
HeapSize
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapReAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
SystemTimeToFileTime
VirtualAlloc
MultiByteToWideChar
RtlUnwind
FreeLibrary
GetFileAttributesA
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
SetStdHandle
user32
EndDialog
ChildWindowFromPoint
KillTimer
SetDlgItemTextA
wsprintfA
GetSystemMetrics
GetWindowRect
BeginPaint
EndPaint
GetDC
ReleaseDC
SetTimer
GetMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
GetParent
ScreenToClient
SendMessageTimeoutA
SetWindowPos
SetForegroundWindow
GetCursorPos
DestroyIcon
IsChild
CheckDlgButton
MessageBeep
GetClientRect
SendDlgItemMessageA
CheckRadioButton
EnableWindow
GetWindowLongA
GetDlgItemInt
GetDlgItemTextA
SetWindowLongA
SetDlgItemInt
LoadStringA
AppendMenuA
GetAsyncKeyState
SystemParametersInfoA
PostQuitMessage
TrackPopupMenu
IsWindowVisible
SetWindowTextA
IsWindow
DestroyWindow
DefWindowProcA
FindWindowA
ShowWindow
MessageBoxA
LoadIconA
RegisterClassExA
LoadAcceleratorsA
PostMessageA
DestroyMenu
CreatePopupMenu
GetDlgItem
SetCursor
LoadCursorA
DestroyCursor
SetClassLongA
SendMessageA
GetWindowTextA
DrawTextA
DialogBoxParamA
CreateDialogParamA
CreateWindowExA
AdjustWindowRectEx
gdi32
SetTextColor
SelectObject
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
SetBkMode
comdlg32
GetOpenFileNameA
advapi32
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
wsock32
recvfrom
htonl
gethostname
bind
connect
htons
ioctlsocket
gethostbyname
sendto
ntohs
gethostbyaddr
closesocket
WSAAsyncSelect
socket
WSACleanup
WSAStartup
WSAGetLastError
ntohl
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ