Static task
static1
Behavioral task
behavioral1
Sample
ffbc64a634689656a35b7fb209a1e6d8f3f374931a6b362a2bdadbbae347088e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffbc64a634689656a35b7fb209a1e6d8f3f374931a6b362a2bdadbbae347088e.exe
Resource
win10v2004-20220812-en
General
-
Target
ffbc64a634689656a35b7fb209a1e6d8f3f374931a6b362a2bdadbbae347088e
-
Size
117KB
-
MD5
0ae874d9b9c82e8311696edb0b53bcea
-
SHA1
0a412a31a6f0bd050eadbb5f83d0bea1a1bea416
-
SHA256
ffbc64a634689656a35b7fb209a1e6d8f3f374931a6b362a2bdadbbae347088e
-
SHA512
9ba51db487ba85ba8375011f5756bc8274c0610f2c8a72399c0d88328d5e059056c988f9b5a7fca93165034021d6ebd007863b8a5981268bcd62af7dfa1c8008
-
SSDEEP
3072:VFypsTHQUvNnKvPqv/Yx9ku66pEv/H82FZ:VmsTHrCPqv/Yrkx1E2Z
Malware Config
Signatures
Files
-
ffbc64a634689656a35b7fb209a1e6d8f3f374931a6b362a2bdadbbae347088e.exe windows x86
6d3a6c5b5445f90c3c1240a9c3056071
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateFileMappingA
ExitProcess
FindAtomA
FindResourceA
GetAtomNameA
GetCommandLineA
GetFileInformationByHandle
GetFileTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetProcAddress
GetProcessVersion
GetProfileSectionA
GetStartupInfoA
GetSystemDefaultLCID
GetThreadTimes
GetUserDefaultLCID
GetVersion
GlobalHandle
InitAtomTable
IsProcessorFeaturePresent
LoadLibraryExA
LocalHandle
OpenMutexA
OpenProcess
OutputDebugStringA
ReadFile
SetFileTime
SetUnhandledExceptionFilter
SizeofResource
UnlockFile
VirtualQuery
VirtualQueryEx
VirtualUnlock
WaitForMultipleObjectsEx
WritePrivateProfileSectionA
WritePrivateProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
ftell
fwrite
malloc
memset
rewind
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE