Static task
static1
Behavioral task
behavioral1
Sample
ff23e52a58775f474d0927acf36c2242021870efb8f6649d6ecbaa4aebc8cd6a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff23e52a58775f474d0927acf36c2242021870efb8f6649d6ecbaa4aebc8cd6a.exe
Resource
win10v2004-20220901-en
General
-
Target
ff23e52a58775f474d0927acf36c2242021870efb8f6649d6ecbaa4aebc8cd6a
-
Size
66KB
-
MD5
ab37bcba0fe610f94dd17c69947bd6b6
-
SHA1
92b093fcd545456e4c069b848aa740cc70d1ee53
-
SHA256
ff23e52a58775f474d0927acf36c2242021870efb8f6649d6ecbaa4aebc8cd6a
-
SHA512
c85b4fc9653435688e75cb180ec8fc3a39e1553795ff77d620f9a82bd0eb96a6a411f9971e16c2856b7a36240a1b396050201eca3436ffb2f7c355be08105c04
-
SSDEEP
1536:ac+i2QWeOc+ipeOcQXS69wN2l2H8CnepkZobuEII00:ac+i2QWeOc+ipeOcQXShXZoSEII9
Malware Config
Signatures
Files
-
ff23e52a58775f474d0927acf36c2242021870efb8f6649d6ecbaa4aebc8cd6a.exe windows x86
15ff8c67400bc8bd9b0f49af5547a226
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
lstrlenW
lstrcmpW
AllocConsole
GetStdHandle
HeapFree
lstrcmpiW
HeapAlloc
WriteConsoleW
SetConsoleMode
GetConsoleMode
GetLastError
ReadConsoleW
GetModuleFileNameW
GetTimeFormatW
Sleep
GetSystemDefaultLCID
GetModuleHandleW
ReadConsoleInputW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcatW
GetTempFileNameW
GetVersion
GetTickCount
SetCurrentDirectoryW
WriteFile
CreateDirectoryW
DeleteFileW
CloseHandle
CreateFileW
GetFileAttributesW
GetCurrentDirectoryW
GetTempPathW
ExitProcess
SizeofResource
LockResource
LoadResource
FindResourceW
GetProcessHeap
RemoveDirectoryW
GetCommandLineW
lstrcpyA
lstrlenA
user32
DialogBoxParamW
GetParent
GetDesktopWindow
MessageBoxW
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
LoadStringW
SetDlgItemTextW
GetDlgItem
SetFocus
GetDlgItemTextW
EndDialog
wsprintfW
GetForegroundWindow
ole32
CoInitialize
CoGetObject
CLSIDFromProgID
CoCreateInstance
CoUninitialize
oleaut32
VarBstrFromR4
VarBstrFromR8
VarBstrFromDec
SafeArrayUnaccessData
LoadTypeLi
SysFreeString
VariantInit
SysAllocString
DispInvoke
DispGetIDsOfNames
VariantTimeToSystemTime
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VarBstrFromCy
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ