Static task
static1
Behavioral task
behavioral1
Sample
ff173d5ccfca0bb7f60ccd7fa3ec66ea766878ebe2d1afb44983399e87795e3a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff173d5ccfca0bb7f60ccd7fa3ec66ea766878ebe2d1afb44983399e87795e3a.exe
Resource
win10v2004-20220812-en
General
-
Target
ff173d5ccfca0bb7f60ccd7fa3ec66ea766878ebe2d1afb44983399e87795e3a
-
Size
333KB
-
MD5
a28c653381d7befd887dcfbe34c5f86f
-
SHA1
cc885e35b9707b37458eb88e0835e93115874752
-
SHA256
ff173d5ccfca0bb7f60ccd7fa3ec66ea766878ebe2d1afb44983399e87795e3a
-
SHA512
d082deb4b70369ea27bfdd39a9bc863b6a00b525ece095ac7a6816b58434858560b07b583521a2a05d4cf0e3d024f6d298064b71ec93dc4a61f6c928c2c6bc5a
-
SSDEEP
6144:nZ2S5SiOnq5wE8wlzeUC9f6X6rMngi2tUZzsHdmBu3za5O+uPoTy5hIpy:Z2G9nFBS9f6+MngFtIs93za5O+uAOz4y
Malware Config
Signatures
Files
-
ff173d5ccfca0bb7f60ccd7fa3ec66ea766878ebe2d1afb44983399e87795e3a.exe windows x86
55b099990cbb00fed41881dd2fcc9b1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualAllocEx
Sections
CODE Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ