Static task
static1
Behavioral task
behavioral1
Sample
ff8bafdfb914d8c6feec435d8cf1bb08de3a32fb879fd862e3f2026811ef2fa0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff8bafdfb914d8c6feec435d8cf1bb08de3a32fb879fd862e3f2026811ef2fa0.exe
Resource
win10v2004-20220812-en
General
-
Target
ff8bafdfb914d8c6feec435d8cf1bb08de3a32fb879fd862e3f2026811ef2fa0
-
Size
86KB
-
MD5
b1f754fdef6fec20af487d13f14b6d33
-
SHA1
c01027e403ba246956edadeef075078507854fe9
-
SHA256
ff8bafdfb914d8c6feec435d8cf1bb08de3a32fb879fd862e3f2026811ef2fa0
-
SHA512
2e09f2e98b2db39adf8de16aadd75ef63a138042fc8d6da84c0241251907f54eed113c0b456dd335b7b38dc28336996802cac56885c82384473a75a4f766710d
-
SSDEEP
1536:zucaS9mhEf8+ptUSjqFMaztleruMV1yPMR3pLLJZweL+C+2V5NPXhO:njTlCttleruqyPMZBLJOrjYJXh
Malware Config
Signatures
Files
-
ff8bafdfb914d8c6feec435d8cf1bb08de3a32fb879fd862e3f2026811ef2fa0.exe windows x86
2550febbfd71519451237fb98da007eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
InitAtomTable
lstrcpynW
HeapValidate
GetFileAttributesW
MulDiv
TerminateProcess
IsDBCSLeadByte
CreateFileW
lstrlenW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
UnhandledExceptionFilter
LockResource
CreateEventW
SizeofResource
FoldStringW
GetModuleHandleA
LoadLibraryExA
HeapSetInformation
CreateMutexA
IsDebuggerPresent
GetStringTypeW
PurgeComm
ReleaseMutex
DeleteFileW
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
LoadLibraryW
WideCharToMultiByte
GetTickCount
GlobalLock
HeapFree
GetCurrentActCtx
SystemTimeToFileTime
LoadResource
IsProcessorFeaturePresent
VirtualQuery
GetCPInfo
UnmapViewOfFile
MapViewOfFile
FindResourceA
CreateMutexW
GetDateFormatW
PostQueuedCompletionStatus
GetCommandLineW
user32
LoadIconW
RegisterClassExW
ChildWindowFromPoint
DrawFocusRect
GetCapture
GetDC
wsprintfW
PtInRect
EnumWindows
GetClassLongW
SetFocus
UnhookWinEvent
FindWindowW
WindowFromPoint
MessageBeep
CallNextHookEx
LoadCursorW
GetKeyState
IsZoomed
PostMessageW
SetCapture
FillRect
RegisterWindowMessageW
GetMessageW
ScreenToClient
DestroyWindow
ClientToScreen
OffsetRect
InvalidateRect
SetScrollPos
GetDlgItem
CharUpperW
SetWindowsHookExA
SetWindowPos
SendMessageTimeoutW
CreateDialogParamW
OpenClipboard
UnhookWindowsHookEx
MessageBoxW
GetSystemMetrics
IsWindowVisible
SetDlgItemTextW
MapWindowPoints
EnableWindow
DefWindowProcW
CheckMenuItem
GetWindowThreadProcessId
SetWindowsHookExW
gdi32
GetTextMetricsW
SetBkMode
GetObjectW
StartDocW
SetROP2
CreatePen
comdlg32
GetSaveFileNameW
ReplaceTextW
ChooseFontW
advapi32
RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ