Static task
static1
Behavioral task
behavioral1
Sample
ffd7cf2dc682e2efad4568b3d2055caa2b893bc337039c19b1a9e9392b2a5f55.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffd7cf2dc682e2efad4568b3d2055caa2b893bc337039c19b1a9e9392b2a5f55.exe
Resource
win10v2004-20220812-en
General
-
Target
ffd7cf2dc682e2efad4568b3d2055caa2b893bc337039c19b1a9e9392b2a5f55
-
Size
304KB
-
MD5
25c6a9f987862cf18528b9b524b8e3d0
-
SHA1
f748b4dc295318a2c2fe3b32ba994531bbd1cf6b
-
SHA256
ffd7cf2dc682e2efad4568b3d2055caa2b893bc337039c19b1a9e9392b2a5f55
-
SHA512
9c69ea85c7f7fbd80a88cbc4c5e8df1bcba211b78c6570fa7f2e4c1425be0cc53f2c89fe3ad20a51b9f2e1e881ea1f87e9bae95f4b6bdabc21c6cd47d1d79537
-
SSDEEP
6144:Q4b6xBNU3sbnrYIrZRIekBBLNTIBkaaJaf8hhrgM:Q3vNUcL3R6BBXlJntv
Malware Config
Signatures
Files
-
ffd7cf2dc682e2efad4568b3d2055caa2b893bc337039c19b1a9e9392b2a5f55.exe windows x86
e43c93e91d8002d04eebfa62c6734ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommBreak
EndUpdateResourceA
GlobalHandle
GetExpandedNameA
EnumUILanguagesA
GetCalendarInfoA
SetSystemTimeAdjustment
ExpandEnvironmentStringsA
TermsrvAppInstallMode
SetErrorMode
GetVolumePathNameA
GetFileAttributesExA
VirtualAlloc
SetSystemPowerState
WritePrivateProfileStringA
FileTimeToSystemTime
VirtualAllocEx
GetPriorityClass
GetThreadPriorityBoost
GlobalSize
FreeEnvironmentStringsA
GetTempPathA
SetConsoleCP
SetPriorityClass
GetLocaleInfoA
GetEnvironmentVariableA
HeapLock
TlsGetValue
IsSystemResumeAutomatic
WriteFile
TlsAlloc
odbc32
SQLSetEnvAttr
glu32
gluUnProject
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ