Static task
static1
Behavioral task
behavioral1
Sample
ff47fed6408cfe0bd299b327f44fdb8c74de8ecd657b5445f170a99a67072b13.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff47fed6408cfe0bd299b327f44fdb8c74de8ecd657b5445f170a99a67072b13.exe
Resource
win10v2004-20220812-en
General
-
Target
ff47fed6408cfe0bd299b327f44fdb8c74de8ecd657b5445f170a99a67072b13
-
Size
105KB
-
MD5
38961833060f91761f967e68ff2a5ca0
-
SHA1
813981294e2e8f1990636f4a32e7af8d93fdb4e4
-
SHA256
ff47fed6408cfe0bd299b327f44fdb8c74de8ecd657b5445f170a99a67072b13
-
SHA512
687f4e44c6eacf15e9335a0106e13a034b977b2de21675d3e116e3a3c8cc813ad0e36f81c72792c9a7afd8fc572209585f3a4ce13e7aefd3130b8c58820f9638
-
SSDEEP
1536:FtYOYhjW2fxf2ZItOT3ZMCszqTJVBrwxD73:/YOYhtJf2G4TpMCrJL+33
Malware Config
Signatures
Files
-
ff47fed6408cfe0bd299b327f44fdb8c74de8ecd657b5445f170a99a67072b13.exe windows x86
14851471065715a3d651aa9857a35bc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
HeapDestroy
SetFilePointer
QueryPerformanceCounter
GetStartupInfoA
lstrcmpiW
MultiByteToWideChar
CreateFileW
MultiByteToWideChar
WriteFile
lstrcpyW
TerminateProcess
ReadFile
WriteFile
InitializeCriticalSection
HeapDestroy
SetFilePointer
UnhandledExceptionFilter
GetProcAddress
FormatMessageW
GetModuleHandleW
WriteFile
VirtualFree
GetTickCount
LoadLibraryW
GetProcessHeap
InterlockedIncrement
LoadLibraryA
HeapFree
TerminateProcess
SetEvent
WaitForSingleObject
MultiByteToWideChar
GetModuleHandleA
HeapFree
GetCurrentThreadId
LoadLibraryW
LocalFree
HeapAlloc
lstrcmpiW
QueryPerformanceCounter
UnhandledExceptionFilter
FormatMessageW
CreateThread
FreeLibrary
Sections
.mphq Size: 88KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plik Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yfre Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lnwq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hquq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hvmk Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vknw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uidq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE