Static task
static1
Behavioral task
behavioral1
Sample
ff4174c9af66cb132ea37de2f926ac3e84013597437537cfc82c0b519be2ff07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff4174c9af66cb132ea37de2f926ac3e84013597437537cfc82c0b519be2ff07.exe
Resource
win10v2004-20220812-en
General
-
Target
ff4174c9af66cb132ea37de2f926ac3e84013597437537cfc82c0b519be2ff07
-
Size
806KB
-
MD5
07755f52ee6f3da6ea35d3e8b20fc778
-
SHA1
a423693ff421d2be495ceebe0d3725c5693cddf3
-
SHA256
ff4174c9af66cb132ea37de2f926ac3e84013597437537cfc82c0b519be2ff07
-
SHA512
b2e3c0d493f62d1262dfd36772a6eecf47269743eb48d762e17c660b5bb4a5aa08d9a5c505e335e18013dfbc310e5be06d26b814ed7aedd6981f1f00232dfc35
-
SSDEEP
24576:ZNSZSJ6Ryskq/nuaeg/2RQC0TBkRJEdSN74aEW/T:jBsb/3egORQCYBOdN74az
Malware Config
Signatures
Files
-
ff4174c9af66cb132ea37de2f926ac3e84013597437537cfc82c0b519be2ff07.exe windows x86
6546bd52c9388501702ffa1459f93635
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
CreateThread
VirtualAlloc
FreeConsole
LocalSize
GetACP
WriteFile
GetDriveTypeW
GetEnvironmentVariableA
ResetEvent
FindVolumeClose
GetModuleHandleW
ReleaseMutex
GetPrivateProfileIntW
CloseHandle
lstrlenA
LocalFree
GlobalFree
InterlockedExchange
GetExitCodeProcess
user32
GetClassInfoA
GetClientRect
GetKeyboardType
EndDialog
CreateWindowExA
GetSysColor
SetFocus
GetSysColor
CallWindowProcW
DispatchMessageA
DrawStateW
IsMenu
GetCursorInfo
dsprop
CheckADsError
CheckADsError
CheckADsError
CheckADsError
ReportError
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 797KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ