Static task
static1
Behavioral task
behavioral1
Sample
cffd8c5d75a79ac6c6e08c5e35a0d0437b5abafd29fa39edd4493ad70eb970c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cffd8c5d75a79ac6c6e08c5e35a0d0437b5abafd29fa39edd4493ad70eb970c6.exe
Resource
win10v2004-20220812-en
General
-
Target
cffd8c5d75a79ac6c6e08c5e35a0d0437b5abafd29fa39edd4493ad70eb970c6
-
Size
1.4MB
-
MD5
f0c25fed7e5e2daaed69863ac7892ce4
-
SHA1
2462299d2c1619c098831776aa631676edc0b40f
-
SHA256
cffd8c5d75a79ac6c6e08c5e35a0d0437b5abafd29fa39edd4493ad70eb970c6
-
SHA512
821ec108f54a766d723a765b964e1a5a12ac9d46d641d6e1fac58f3cf1078ba419bba5805a1f12a46f44465e825e861f9737e808508fea67e5c672fa61155617
-
SSDEEP
24576:tS6fJHL4InjKF9JWkioht3BxfN+kOQc4qAgHxJqzn6j6YitfuEq0438XKotZZ9:t74QKF9EoPfNfOQc4lgHPqr6j6FOsbT
Malware Config
Signatures
Files
-
cffd8c5d75a79ac6c6e08c5e35a0d0437b5abafd29fa39edd4493ad70eb970c6.exe windows x86
694688d66533c99dfcc357cc89f4d7dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
Sleep
GetProcAddress
EnterCriticalSection
LoadLibraryA
GetModuleHandleA
CloseHandle
GetThreadContext
InterlockedIncrement
InterlockedDecrement
GetModuleHandleExW
GetCurrentThread
VirtualFree
IsBadReadPtr
GetLastError
GetFullPathNameW
InterlockedCompareExchange
WriteFile
SetLastError
DeleteFileA
ExitProcess
SetUnhandledExceptionFilter
SystemTimeToFileTime
WaitForSingleObject
GetTickCount
TerminateProcess
GetTempFileNameA
GetLocalTime
GetProcessId
AddVectoredExceptionHandler
GetTempPathA
WideCharToMultiByte
GetFileAttributesA
RemoveDirectoryA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
FreeLibrary
GetStdHandle
TlsAlloc
TlsGetValue
TlsSetValue
WriteConsoleA
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetFilePointer
ReadFile
GetCommandLineA
GetStartupInfoA
user32
MessageBoxA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ