Static task
static1
Behavioral task
behavioral1
Sample
ff66344220cd0172fab4f06def5ae66617c5c8ad5ebc54d8c7bee799e86e4894.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff66344220cd0172fab4f06def5ae66617c5c8ad5ebc54d8c7bee799e86e4894.exe
Resource
win10v2004-20221111-en
General
-
Target
ff66344220cd0172fab4f06def5ae66617c5c8ad5ebc54d8c7bee799e86e4894
-
Size
90KB
-
MD5
5598794d374ad7a62d5988e097c81c20
-
SHA1
d4091c34b567a5f3ca7beaf89397e5c659718cad
-
SHA256
ff66344220cd0172fab4f06def5ae66617c5c8ad5ebc54d8c7bee799e86e4894
-
SHA512
0503051084dd0e00e1317a4820de876ab37e3698a6069fee531d31b2a146946e9d5c44351725fe61c521f3af1f169ad320b0f4f484e99b34b2b500884525470d
-
SSDEEP
1536:fsFawHySYEc+20NfXsx22i+K5c8d6ty/QunRysxaUpZkmfaIMLGQ0Aev9GG:maUytt+/Xl2i+V8Msx9xfaIMLGQiYG
Malware Config
Signatures
Files
-
ff66344220cd0172fab4f06def5ae66617c5c8ad5ebc54d8c7bee799e86e4894.exe windows x86
963dfd13c0946bb6fd4da39590755fe4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
ntdll
_snprintf
memset
strlen
kernel32
GetModuleFileNameA
ExitProcess
CreateProcessA
Sleep
lstrcpyA
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
GetSystemDirectoryA
GetEnvironmentVariableA
lstrcatA
GetShortPathNameA
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
msvcrt
_onexit
__dllonexit
Sections
.data Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE