Static task
static1
Behavioral task
behavioral1
Sample
ffbf80a42032e11d87941cdc104263250c9323f2b4ac6cd16eb0aa3f7b5d2ca0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ffbf80a42032e11d87941cdc104263250c9323f2b4ac6cd16eb0aa3f7b5d2ca0.exe
Resource
win10v2004-20220812-en
General
-
Target
ffbf80a42032e11d87941cdc104263250c9323f2b4ac6cd16eb0aa3f7b5d2ca0
-
Size
56KB
-
MD5
20072a62d54f5ed1022951b1aa2a2aed
-
SHA1
12e3b226647592eda5c937a5440e74fa766e3265
-
SHA256
ffbf80a42032e11d87941cdc104263250c9323f2b4ac6cd16eb0aa3f7b5d2ca0
-
SHA512
c6d5f4de1f1bb53c71d7d93e5a20634100c4a1cd0d5f0cce22cfab160d076fcccd9683d0c76c68a2b3ca98bc870bbcb4e672fdc34d7153e3133b8230817463a3
-
SSDEEP
768:7bXKKKzIxL4NlSX4usaJkxZTX/YBClktqG3yw5viDeDPTqCeUGmQXjbVmq3zWbIL:7Jzpkx++gqoBiDc/ObVmq3ILt2uE
Malware Config
Signatures
Files
-
ffbf80a42032e11d87941cdc104263250c9323f2b4ac6cd16eb0aa3f7b5d2ca0.exe windows x86
5cd59c655a11a50784c5bd319294db3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatA
InitializeSListHead
HeapFree
GetCPInfo
WriteConsoleInputVDMA
PurgeComm
CloseConsoleHandle
CreateJobSet
RegisterWowBaseHandlers
_lclose
GetCPInfoExA
InterlockedIncrement
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE