Static task
static1
Behavioral task
behavioral1
Sample
ff6389fcf6bbc065ba6fb57b921058dac60199003cf4affe5f288f29c0b18bde.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff6389fcf6bbc065ba6fb57b921058dac60199003cf4affe5f288f29c0b18bde.exe
Resource
win10v2004-20220901-en
General
-
Target
ff6389fcf6bbc065ba6fb57b921058dac60199003cf4affe5f288f29c0b18bde
-
Size
784KB
-
MD5
0b3887955824e4cbee7144c110e1d500
-
SHA1
bf06511c399bbe7f26df6d7fc235dc1cfaabc864
-
SHA256
ff6389fcf6bbc065ba6fb57b921058dac60199003cf4affe5f288f29c0b18bde
-
SHA512
648bc5de2dc5da164069a5b542f515fbe2b476beba22d97584fffc06915369dbc378f0af4356cec924539fceb2aa26a9a86b2779a19058b6d5fb345f29080577
-
SSDEEP
24576:Y7KxufsI9q5Hl2vGSIwCQjlmiYc0C/pnX2sZOn736tO:gKxI7LzQn7r
Malware Config
Signatures
Files
-
ff6389fcf6bbc065ba6fb57b921058dac60199003cf4affe5f288f29c0b18bde.exe windows x86
230ddf2558c6ebe82663d725c3742cef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetStdHandle
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetFileType
GetACP
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileAttributesA
GetLastError
SetFilePointer
SetEndOfFile
WriteFile
GetStdHandle
CloseHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
VirtualAlloc
VirtualFree
GetVersionExA
ReadFile
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
DeleteFileA
WaitForSingleObject
SetThreadPriority
CreateProcessA
GetLocalTime
FlushFileBuffers
GetVersion
ExitProcess
GetSystemTimeAsFileTime
TerminateProcess
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
HeapAlloc
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapSize
GetStringTypeA
GetStringTypeW
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
GetCPInfo
GetOEMCP
SetEnvironmentVariableA
CompareStringA
CompareStringW
user32
ShowWindow
CreateWindowExA
SetWindowPos
InvalidateRect
BeginPaint
GetClientRect
GetSysColor
FillRect
UpdateWindow
GetWindowRect
PostQuitMessage
DefWindowProcA
RegisterClassA
LoadCursorA
LoadIconA
GetWindowLongA
GetForegroundWindow
PeekMessageA
TranslateMessage
EndPaint
DispatchMessageA
lmgr325c
ord77
ord39
ord72
ord79
ord67
ord56
ord61
ord52
ord43
ord32
ord63
ord186
ord65
ord74
ord34
ord33
ord45
gdi32
BitBlt
CreateSolidBrush
CreateICA
GetDeviceCaps
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
SetBkMode
GetStockObject
CreateFontA
GetTextExtentPoint32A
Rectangle
TextOutA
MoveToEx
LineTo
Polyline
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysStringLen
SysFreeString
SysAllocString
Sections
.text Size: 476KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 30.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE