Static task
static1
Behavioral task
behavioral1
Sample
ffcad4e410603497ecd151ff8d920d40763ef6fef31695a83973c96ad4a37b0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffcad4e410603497ecd151ff8d920d40763ef6fef31695a83973c96ad4a37b0c.exe
Resource
win10v2004-20220812-en
General
-
Target
ffcad4e410603497ecd151ff8d920d40763ef6fef31695a83973c96ad4a37b0c
-
Size
305KB
-
MD5
dd142956c34083f579ee71f1c2039e41
-
SHA1
f1069cc8ebb0f21a3f1e725e45c5645a18a91e39
-
SHA256
ffcad4e410603497ecd151ff8d920d40763ef6fef31695a83973c96ad4a37b0c
-
SHA512
46452d0636af5ea3ef187fb9725bc93d9300f826636f0ae1cf3197f7592226cef37f5abc640a2d8e85224891f120c4e739deddb7506d8fd0f988474580775fe8
-
SSDEEP
6144:KErGYvNGKGj8857NLUHLMDJUMwQ/3XxPVRS:KRrKGjDRNL4MDhw4BPq
Malware Config
Signatures
Files
-
ffcad4e410603497ecd151ff8d920d40763ef6fef31695a83973c96ad4a37b0c.exe windows x86
0cf9565a66273e5b7ae5d8c154591b7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
HeapCreate
EnterCriticalSection
GetDriveTypeW
SetEvent
GetConsoleAliasW
FindAtomW
TlsGetValue
SetLastError
ReadFile
GetPrivateProfileStringW
GetModuleFileNameA
GetCurrentThreadId
EnumCalendarInfoW
FindClose
GetCurrentProcessId
LocalFree
GetNumberFormatW
GetModuleHandleA
ResumeThread
user32
GetSysColor
GetMenuInfo
DispatchMessageA
DrawTextA
GetClassInfoA
CallWindowProcW
GetKeyboardType
IsWindow
DispatchMessageA
SetFocus
GetClientRect
GetKeyState
GetCursorInfo
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ