Static task
static1
Behavioral task
behavioral1
Sample
ff8c32193fca396b22c8a6c76524d84e15a3f8d2ed20110a242701d3618bf5af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff8c32193fca396b22c8a6c76524d84e15a3f8d2ed20110a242701d3618bf5af.exe
Resource
win10v2004-20220901-en
General
-
Target
ff8c32193fca396b22c8a6c76524d84e15a3f8d2ed20110a242701d3618bf5af
-
Size
476KB
-
MD5
ad62b5873512b6c4ed1d3ecab18a4f32
-
SHA1
396c065f0b0e7a4bb3d9dc953a6a19350b93796f
-
SHA256
ff8c32193fca396b22c8a6c76524d84e15a3f8d2ed20110a242701d3618bf5af
-
SHA512
a2df6299b1513aad68b3ee333db957a50bd2cef28b17d9870778556358890f528fb7965d01471083725de45033acb4e8470062062ea2dfc61b47d39d63eba171
-
SSDEEP
12288:P5P7FpMexLQZcPfm/WBydISyHex7sBac6CeIIWdj3bYZT:P5h6G+WBhSyHeHwYZT
Malware Config
Signatures
Files
-
ff8c32193fca396b22c8a6c76524d84e15a3f8d2ed20110a242701d3618bf5af.exe windows x86
a0d4a629bfe8563daa347ede67348374
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptHashData
CryptSetProviderA
gdi32
GetDeviceCaps
SetWindowExtEx
ChoosePixelFormat
CreateDiscardableBitmap
DeleteDC
StartDocW
SetMetaRgn
EnumObjects
SetBkColor
GetPolyFillMode
CreateBrushIndirect
SetWindowOrgEx
GetPixel
CreateDCW
GetWorldTransform
SetMetaFileBitsEx
GetPath
SelectObject
GetCharABCWidthsFloatW
Chord
GetBitmapBits
TranslateCharsetInfo
ExtCreatePen
CreateScalableFontResourceW
EnableEUDC
GetROP2
GetMetaFileA
IntersectClipRect
comdlg32
ChooseColorA
FindTextA
shell32
SHGetSpecialFolderLocation
SHEmptyRecycleBinW
DuplicateIcon
kernel32
GetLocaleInfoW
GetStartupInfoW
GetModuleHandleW
FreeEnvironmentStringsW
LCMapStringW
CompareStringA
LockResource
TerminateProcess
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetModuleFileNameW
WriteFile
WriteConsoleA
TlsAlloc
GetStringTypeW
LoadLibraryW
CreateNamedPipeW
CreateFileA
IsDebuggerPresent
GetModuleHandleA
Sleep
GetTickCount
GetDateFormatA
GetTimeZoneInformation
SetUnhandledExceptionFilter
SetLastError
HeapValidate
GetFileType
GetEnvironmentStringsA
GetEnvironmentStringsW
lstrlenA
SetStdHandle
CreateMutexA
GetProcessHeap
VirtualFree
WideCharToMultiByte
UnhandledExceptionFilter
HeapReAlloc
LeaveCriticalSection
LoadLibraryA
IsValidLocale
VirtualLock
OutputDebugStringW
LCMapStringA
GetStringTypeA
RaiseException
EnumTimeFormatsA
GetCurrentProcess
GetStdHandle
HeapDestroy
GetTimeFormatA
SetCriticalSectionSpinCount
GetOEMCP
SetHandleCount
GetCommandLineA
CompareStringW
GetCPInfo
GetConsoleCP
HeapFree
OpenMutexA
WriteConsoleW
MultiByteToWideChar
GetLocaleInfoA
SetConsoleCtrlHandler
VirtualAlloc
FreeLibrary
EnumSystemLocalesA
GetFileTime
SetEnvironmentVariableA
lstrcpyW
ReadFile
VirtualQuery
ExitProcess
FlushFileBuffers
GetConsoleOutputCP
HeapCreate
GetCurrentThread
OutputDebugStringA
HeapAlloc
CloseHandle
EnterCriticalSection
InterlockedIncrement
GetConsoleMode
TlsFree
IsValidCodePage
GetCurrentProcessId
GetThreadContext
GetProcAddress
IsBadReadPtr
GetModuleFileNameA
GetUserDefaultLCID
GetLastError
InterlockedDecrement
SetFilePointer
TlsGetValue
GetACP
DebugBreak
GetStartupInfoA
DeleteCriticalSection
RtlUnwind
TlsSetValue
GetCommandLineW
GetSystemDirectoryA
GetSystemTimeAsFileTime
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
comctl32
CreateStatusWindowW
ImageList_DragMove
ImageList_Remove
ImageList_Create
InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_Destroy
CreateStatusWindowA
ImageList_SetDragCursorImage
ImageList_GetImageInfo
CreatePropertySheetPageW
user32
RegisterClassA
RegisterClassExA
ReuseDDElParam
DispatchMessageW
DlgDirListComboBoxA
MessageBoxExA
GetDlgItemTextW
DrawTextW
CreateWindowExA
MessageBoxW
InsertMenuA
OemToCharA
CharPrevW
DrawFocusRect
SetRect
SetUserObjectSecurity
DrawFrameControl
ShowWindow
SetClipboardViewer
GetGUIThreadInfo
GetMenuStringA
Sections
.text Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ