Static task
static1
Behavioral task
behavioral1
Sample
ffa33f9f570d5039e134caf65909c3e04b9da447986f7949294cf91a2504d5f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffa33f9f570d5039e134caf65909c3e04b9da447986f7949294cf91a2504d5f2.exe
Resource
win10v2004-20220812-en
General
-
Target
ffa33f9f570d5039e134caf65909c3e04b9da447986f7949294cf91a2504d5f2
-
Size
235KB
-
MD5
0e66e6c6443a6b6e4a50f5b48ecd1b88
-
SHA1
4ead4aa416f5714e26b88428013863a630bda9a3
-
SHA256
ffa33f9f570d5039e134caf65909c3e04b9da447986f7949294cf91a2504d5f2
-
SHA512
6f6cc4972e0b89017d4b0249abc3eeaf517d091d34777c4241c1be796c2d93c2be132f6264fcbc4a82a7283bab5ab7fe7405776b596651c3e0d58bb427947cf8
-
SSDEEP
6144:etjbgJVMPJ6uUIGz9RYR3OJoRLf3sKibUL/pZ7cGZxsmq6w:etHsQ6Sk9RYR3Oo5sKln7vFK
Malware Config
Signatures
Files
-
ffa33f9f570d5039e134caf65909c3e04b9da447986f7949294cf91a2504d5f2.exe windows x86
b67710ccc5d01ec98c2f948e1bdf3d59
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrcmpiW
OutputDebugStringA
GetProcAddress
TerminateProcess
lstrcpyA
SwitchToThread
GetModuleHandleW
GetStartupInfoW
ExitProcess
CreateThread
user32
FindWindowA
OpenClipboard
GetActiveWindow
DispatchMessageW
GetMessageA
TranslateMessage
advapi32
GetUserNameW
comctl32
ord17
powrprof
GetPwrCapabilities
wintrust
WinVerifyTrust
crypt32
CryptProtectData
winmm
mciSendStringA
ntdll
DbgPrint
memset
msvcrt
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
exit
__p__fmode
__set_app_type
_except_handler3
__p__commode
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE