Static task
static1
Behavioral task
behavioral1
Sample
ffe73809d8bf710f886808a12ff4a4caafc336969be5848ce5decbca5b906bfa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffe73809d8bf710f886808a12ff4a4caafc336969be5848ce5decbca5b906bfa.exe
Resource
win10v2004-20220812-en
General
-
Target
ffe73809d8bf710f886808a12ff4a4caafc336969be5848ce5decbca5b906bfa
-
Size
797KB
-
MD5
f1bb57ba4fd649d002c90e8b3d9075e9
-
SHA1
a73af756d4670b7c5d8b40471bced06a0ad852f7
-
SHA256
ffe73809d8bf710f886808a12ff4a4caafc336969be5848ce5decbca5b906bfa
-
SHA512
cbd41f8d942084935264e0e0c107b2f5622d1fbae816d501a51153244955e7e7aac7bc4518c38f21a13596b7a762e00f6ad413eade529b28fab8ef7630328bc8
-
SSDEEP
24576:0vCXQSJ51eNdnicqwIdzCaYzy9t5qs9o:VX1adnicAzHY6t9o
Malware Config
Signatures
Files
-
ffe73809d8bf710f886808a12ff4a4caafc336969be5848ce5decbca5b906bfa.exe windows x86
9cceb55a5481b132de46d5312fdc7c2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
FindClose
GetModuleHandleA
MapViewOfFile
GetExitCodeThread
IsBadWritePtr
IsValidCodePage
SetLastError
HeapSize
VirtualProtect
CreateDirectoryA
GetFileAttributesA
CancelIo
GetLocaleInfoA
GetTickCount
GetFileAttributesA
CreateMailslotW
GetDriveTypeW
ResetEvent
FindResourceA
RemoveDirectoryA
user32
PeekMessageA
LoadImageW
DispatchMessageA
SetCursor
GetWindowLongW
wsprintfA
IsWindow
GetWindowTextW
PostMessageW
SetFocus
LoadCursorA
IsDialogMessageA
GetCapture
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE