Static task
static1
Behavioral task
behavioral1
Sample
ffd79037cea70587cde878e25042a72cb2df7cf7fc7661d05fc7941417cfd231.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffd79037cea70587cde878e25042a72cb2df7cf7fc7661d05fc7941417cfd231.exe
Resource
win10v2004-20221111-en
General
-
Target
ffd79037cea70587cde878e25042a72cb2df7cf7fc7661d05fc7941417cfd231
-
Size
880KB
-
MD5
c45e7c8a3c9e4d1dc546f28641e62e46
-
SHA1
ae4fcab5c758520490878ad37763750fe4630be4
-
SHA256
ffd79037cea70587cde878e25042a72cb2df7cf7fc7661d05fc7941417cfd231
-
SHA512
76c1e01a1568dcf5636b0ec2a44bb2bda85445d37465682e115e9ec669393c041de038eceebd88389faecf7a6741f25a28316ed6ff055639361d0536f5bdcbe4
-
SSDEEP
12288:u7Wp3+WWSYrcvKtN2TOXM80BiQ4ZxywVNKJRzaKAYzb6H4VLum6U:y63ZWPrL2Th8EN4ZNXaZaSSYVL
Malware Config
Signatures
Files
-
ffd79037cea70587cde878e25042a72cb2df7cf7fc7661d05fc7941417cfd231.exe windows x86
f2c8cc073e74fcb8ffef0920b6166f25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
GetFileTime
CreateFileMappingW
DeleteFileA
GetStartupInfoA
FindClose
HeapCreate
IsDebuggerPresent
GetModuleFileNameW
GetDriveTypeW
CloseHandle
LocalFlags
lstrlenA
CreateFileW
GetConsoleAliasW
Sleep
DeviceIoControl
CloseHandle
GetCommandLineA
GetModuleHandleA
user32
GetIconInfo
LoadImageA
IsZoomed
DestroyWindow
GetWindowLongA
IsWindow
CallWindowProcW
DispatchMessageA
PeekMessageA
BeginPaint
DestroyMenu
DispatchMessageA
DrawTextW
dmcompos
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ