Static task
static1
Behavioral task
behavioral1
Sample
ffe74a93f765b29c35a47de31028d3252e2034cd6da95bb867189134427966d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffe74a93f765b29c35a47de31028d3252e2034cd6da95bb867189134427966d7.exe
Resource
win10v2004-20220812-en
General
-
Target
ffe74a93f765b29c35a47de31028d3252e2034cd6da95bb867189134427966d7
-
Size
59KB
-
MD5
46d7dcb8e5121b5e55e5a0b716c5d218
-
SHA1
ef4f78d50b499784664e6029bb1b204562197774
-
SHA256
ffe74a93f765b29c35a47de31028d3252e2034cd6da95bb867189134427966d7
-
SHA512
59e6ad1a5c1fe5d4a8de144846a94258ffcdc9d267844cee2b7b64c6dd6c4c042cee55027c6bb39814959af55283387f4f2ec4ec5f8fb4ba977a5879abbcb37f
-
SSDEEP
768:J5vZpErUZULhice0U9mPJLk0wMeLQdUKDa9w7CPJnuOk+WYNkYyiMVEXOq:0r+90U9mBLmMCe7yuOkDYOdiMcO
Malware Config
Signatures
Files
-
ffe74a93f765b29c35a47de31028d3252e2034cd6da95bb867189134427966d7.exe windows x86
b3f5fe81cd69126a31170862df38b94c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetDiskFreeSpaceA
GetModuleHandleA
GetExitCodeProcess
SetFilePointer
LoadLibraryExW
GetPriorityClass
CloseHandle
SetEnvironmentVariableW
GetDiskFreeSpaceA
GetFileAttributesA
CloseHandle
GetPrivateProfileIntW
GetPrivateProfileIntW
InterlockedExchange
CreateEventA
CloseHandle
CreateDirectoryW
HeapCreate
GetPrivateProfileSectionW
OpenMutexA
WaitForMultipleObjects
lstrcmpA
certcli
CAEnumFirstCA
CADeleteCA
CADeleteCertType
CAEnumCertTypes
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE