Static task
static1
Behavioral task
behavioral1
Sample
fff85bf81978a4d47504fd7c48301d1bb9d690170890c605790cff8f8140c577.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fff85bf81978a4d47504fd7c48301d1bb9d690170890c605790cff8f8140c577.exe
Resource
win10v2004-20221111-en
General
-
Target
fff85bf81978a4d47504fd7c48301d1bb9d690170890c605790cff8f8140c577
-
Size
4.2MB
-
MD5
c131a8e807f9e544a5804e79780252ad
-
SHA1
eeabf65115acfe94f7cebcec612e564e51f0bc3f
-
SHA256
fff85bf81978a4d47504fd7c48301d1bb9d690170890c605790cff8f8140c577
-
SHA512
193ed18232925078058adad38365bcb504d3f42c45e81b8b2b9154bbd946b46799632f0c8bc00bc424edec6b1e8e565027910cd21cb614f7616c4999a229bc1d
-
SSDEEP
98304:P8vOCFtzj00epbbnfC96ndTgVjizhjxrdZbGf54usAO/QGa:P8vOEX6dTghiF3ZbGf54usAOYZ
Malware Config
Signatures
Files
-
fff85bf81978a4d47504fd7c48301d1bb9d690170890c605790cff8f8140c577.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 522KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xcobdgqr Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzfrpnyt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE