Static task
static1
Behavioral task
behavioral1
Sample
ffca40d3a8d08b99a61dffe03ce96fcef346bf874f8e8ab55f7eb1b5ee7542bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffca40d3a8d08b99a61dffe03ce96fcef346bf874f8e8ab55f7eb1b5ee7542bc.exe
Resource
win10v2004-20220901-en
General
-
Target
ffca40d3a8d08b99a61dffe03ce96fcef346bf874f8e8ab55f7eb1b5ee7542bc
-
Size
215KB
-
MD5
82c9e3539381fb4e643c308561fd8490
-
SHA1
4ce708d9c8be6c968beb4bb0fb28a57ef2e9576c
-
SHA256
ffca40d3a8d08b99a61dffe03ce96fcef346bf874f8e8ab55f7eb1b5ee7542bc
-
SHA512
cebebda51729a663bd120899fbefc7ffc463d443ef4cb1ec01225532ad43d675f227fbf269599ba82f373cdc46a19bb25f48bf0176ab94ad47cbe7b87f438d18
-
SSDEEP
6144:S4aVYfFL3RCxU4ryiYBE+EJR5WkR1O58Xqoye25:KVykxUoFAkXO5vX
Malware Config
Signatures
Files
-
ffca40d3a8d08b99a61dffe03ce96fcef346bf874f8e8ab55f7eb1b5ee7542bc.exe windows x86
10bdab2e7aa9257d86aea72509147bff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
scecli
SceCloseProfile
SceAnalyzeSystem
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceBrowseDatabaseTable
SceAddToObjectList
kernel32
lstrcmpA
LoadLibraryW
GetLocaleInfoA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetLocalTime
GetCurrentProcess
CloseHandle
SetLastError
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateFileA
SystemTimeToFileTime
GetOEMCP
FindResourceA
GetTickCount
HeapAlloc
HeapFree
QueryPerformanceCounter
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 8KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ