Static task
static1
Behavioral task
behavioral1
Sample
dffdcffd41287a4d4fe8aaf36472b303570e17f2d661bdaa03e68b85eaa8d2ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dffdcffd41287a4d4fe8aaf36472b303570e17f2d661bdaa03e68b85eaa8d2ff.exe
Resource
win10v2004-20220812-en
General
-
Target
dffdcffd41287a4d4fe8aaf36472b303570e17f2d661bdaa03e68b85eaa8d2ff
-
Size
156KB
-
MD5
04c08b6aafaaec19a38eea2e9d0ca715
-
SHA1
57c619126786af3d2548be9fc6845aa891449a66
-
SHA256
dffdcffd41287a4d4fe8aaf36472b303570e17f2d661bdaa03e68b85eaa8d2ff
-
SHA512
07c3255d7b37f8fa24de9e556054ef2d23061cd9be13cd8bb12b1ae206685796e116980ff3fdfe7ad3fffac6d930413c23c8a643cfddb424aec879f8193e2089
-
SSDEEP
3072:gQ0gSu55HfwkNt6060nyUMm1tCGGO+DLJk:gxgSIBt6RgFtC4+Dlk
Malware Config
Signatures
Files
-
dffdcffd41287a4d4fe8aaf36472b303570e17f2d661bdaa03e68b85eaa8d2ff.exe windows x86
9040b0b0b59759e7d6af710a54b749ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
user32
DefWindowProcA
GetWindowLongA
LoadCursorW
LoadIconW
RegisterClassW
SendMessageA
SetWindowLongA
SystemParametersInfoA
CharNextA
shlwapi
PathFindExtensionA
kernel32
CloseHandle
FreeEnvironmentStringsA
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
LCMapStringA
LoadLibraryA
MultiByteToWideChar
Sleep
UnhandledExceptionFilter
VirtualProtect
lstrcatW
WideCharToMultiByte
msimg32
GradientFill
advapi32
RegOpenKeyExA
RegQueryValueExA
gdi32
GetObjectA
ntdll
NtQuerySystemInformation
RtlInitUnicodeString
RtlUnicodeStringToInteger
RtlGUIDFromString
Sections
AUTO Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ