Static task
static1
Behavioral task
behavioral1
Sample
ffd993a79dae019de003256b5ac1c004474cf897ca303431db7a46ab88f30976.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffd993a79dae019de003256b5ac1c004474cf897ca303431db7a46ab88f30976.exe
Resource
win10v2004-20220901-en
General
-
Target
ffd993a79dae019de003256b5ac1c004474cf897ca303431db7a46ab88f30976
-
Size
152KB
-
MD5
816b394abb23b85191b0a22bdaad188b
-
SHA1
79c9e9994499b3967082415f83ecd4392bb34519
-
SHA256
ffd993a79dae019de003256b5ac1c004474cf897ca303431db7a46ab88f30976
-
SHA512
9825b8800b3d1034ed8e9238c099523965496967abefabb08b74c7949f9dadec91601862e3ed0c19631d9ee77eb8344ed4457796c2f9c8666c06f20572296c5e
-
SSDEEP
3072:GbXBrlz5lwgVzLYnHReZdiBuObK+TNPZMymYZPVObMEqg+rnsGnDaYC:GbXHzvwgVP+6yHEbpinswaYC
Malware Config
Signatures
Files
-
ffd993a79dae019de003256b5ac1c004474cf897ca303431db7a46ab88f30976.exe windows x86
84f2245d666cfbb2fc398d197d44467b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mspdb60
?OpenValidate3@PDB@@SAHPBD0PAJQAD2PAK3PAPAU1@@Z
msvcrt
free
??2@YAPAXI@Z
_splitpath
_mbsinc
_ismbcspace
qsort
_mbsstr
sscanf
fgets
_mbscmp
_mbsnbcmp
_mbschr
??3@YAXPAX@Z
_mbslwr
strncmp
_mbspbrk
_mbsrchr
_snprintf
_mbsnbicmp
_strdup
getenv
_makepath
atoi
fgetc
ungetc
_fsopen
fclose
_mbsicmp
bsearch
fseek
fflush
fprintf
_iob
_vsnprintf
sprintf
printf
_fullpath
fwrite
perror
rename
_mbsncmp
malloc
realloc
strncpy
__dllonexit
_onexit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
ftell
fread
_purecall
_ismbcdigit
exit
_mbctoupper
kernel32
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleHandleA
GetFileAttributesA
GetModuleFileNameA
SearchPathA
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE