Static task
static1
Behavioral task
behavioral1
Sample
ffdcfa188cbd4954b10f34fb7eea5dda25d675e93b973667919d987a3fda577c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffdcfa188cbd4954b10f34fb7eea5dda25d675e93b973667919d987a3fda577c.exe
Resource
win10v2004-20220812-en
General
-
Target
ffdcfa188cbd4954b10f34fb7eea5dda25d675e93b973667919d987a3fda577c
-
Size
1.9MB
-
MD5
cd97dae35fb7dce7b3317c2585e9a5e6
-
SHA1
475706465d026aef89b56f612e666f430f3b23ab
-
SHA256
ffdcfa188cbd4954b10f34fb7eea5dda25d675e93b973667919d987a3fda577c
-
SHA512
f9da0c9882bbcd4d458bcb569936d2f72225934c4672f15bdacfd507e659710d81f830b97ab1b4e1c9dab50473787cefe2a5f3cb7175a2c6fe274be652c142df
-
SSDEEP
49152:Ohs4e0Kbw0eJ1E2o3RrRyN+vHbxSuR5zSGffPD5P6rQ:tdb9jRU+9FR5zSQP5
Malware Config
Signatures
Files
-
ffdcfa188cbd4954b10f34fb7eea5dda25d675e93b973667919d987a3fda577c.exe windows x86
8b698261d6dbfd7c31828bbb6b84412b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
WSACleanup
rasapi32
RasGetConnectStatusA
kernel32
GetTimeZoneInformation
user32
CreateIconFromResource
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SysAllocStringByteLen
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 796KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ