Static task
static1
Behavioral task
behavioral1
Sample
ff59f67d04e7182d2d0db2dc3f05d280907821e41535cccd8583f9c8a36b89ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff59f67d04e7182d2d0db2dc3f05d280907821e41535cccd8583f9c8a36b89ea.exe
Resource
win10v2004-20220901-en
General
-
Target
ff59f67d04e7182d2d0db2dc3f05d280907821e41535cccd8583f9c8a36b89ea
-
Size
32KB
-
MD5
076cebb5321d3c231b055b54a83eabb0
-
SHA1
8f33443bef19a40e28592f6a9b35af0223377e58
-
SHA256
ff59f67d04e7182d2d0db2dc3f05d280907821e41535cccd8583f9c8a36b89ea
-
SHA512
acaa89ab9b2c2f2fa7f4f38b8521f80d8c72a064ce4bbf9cdabe64c1479d8417a8577b2f9671925ac94ad60a0aa56bf8776da0fa568e391947d108281904be32
-
SSDEEP
768:CY0pLcJ3Mne7wYcSw3sZTsbaLBxgESkJogjqe6LpDe+b:CNoae7wYcVe2MByE3oq0DT
Malware Config
Signatures
Files
-
ff59f67d04e7182d2d0db2dc3f05d280907821e41535cccd8583f9c8a36b89ea.exe windows x86
6138bdb74abc795b0a998eb00778d570
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_except_handler3
_c_exit
advapi32
ControlService
OpenServiceW
OpenSCManagerW
NotifyBootConfigStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetServiceStatus
kernel32
SetEvent
ExitThread
WaitForSingleObject
ExitProcess
CreateEventA
GetLastError
GetModuleHandleA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE