Static task
static1
Behavioral task
behavioral1
Sample
ffb16ba4a7c37bed5c0c3318a5921e7029fb8647592dc233b1a49c11f3cb8737.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffb16ba4a7c37bed5c0c3318a5921e7029fb8647592dc233b1a49c11f3cb8737.exe
Resource
win10v2004-20220812-en
General
-
Target
ffb16ba4a7c37bed5c0c3318a5921e7029fb8647592dc233b1a49c11f3cb8737
-
Size
364KB
-
MD5
84b6a577f2c78f31d08f1c5280cf717e
-
SHA1
e224ef394ee99ad0d29cac09e51241b9e34306fc
-
SHA256
ffb16ba4a7c37bed5c0c3318a5921e7029fb8647592dc233b1a49c11f3cb8737
-
SHA512
6fa0bb9fe5faf05af5acba23fd029f579dc045f26445958bb873431426e6fa2de0da1760843d6bfa96654903d0085503a88127e9ea2ce7be8b7b0b9bac556c6c
-
SSDEEP
6144:SFMRk5GgM8syzmILxjQPSBg+/O9mbL+ZNdN7DepRWqTWA:Sskm8LzmIpQPSq+jw/ZeTL
Malware Config
Signatures
Files
-
ffb16ba4a7c37bed5c0c3318a5921e7029fb8647592dc233b1a49c11f3cb8737.exe windows x86
a0a8aa627f30d63b77c01e97bb8c1092
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA
ExitProcess
GetCurrentProcess
user32
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow
advapi32
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegQueryValueA
RegEnumValueA
RegOpenKeyA
Sections
.text Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ