Static task
static1
Behavioral task
behavioral1
Sample
ffdcad66d3a5fe617e7c7fc92d8d32f80767b8326b8c91531baf075b93e0a9fd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffdcad66d3a5fe617e7c7fc92d8d32f80767b8326b8c91531baf075b93e0a9fd.exe
Resource
win10v2004-20220812-en
General
-
Target
ffdcad66d3a5fe617e7c7fc92d8d32f80767b8326b8c91531baf075b93e0a9fd
-
Size
75KB
-
MD5
890426d0dc1033bf4acaa2478f3dc319
-
SHA1
97bd11222ccff2e2b045768a4eb751f234db9eef
-
SHA256
ffdcad66d3a5fe617e7c7fc92d8d32f80767b8326b8c91531baf075b93e0a9fd
-
SHA512
165249f5d9ac449e9da23dfe9822a8d860b96d814a494a72fa036006260cc226f5e632153334a470ff9a6fa1b5bf06a5eb93e8cea9768ca07b68437e928e76d0
-
SSDEEP
1536:P5CGnHnuOHCeY7gic6I7BgQGiBhqBtnCUKyKTnSjxo:hCGHDY7Y6I7N97qBtCp3nUo
Malware Config
Signatures
Files
-
ffdcad66d3a5fe617e7c7fc92d8d32f80767b8326b8c91531baf075b93e0a9fd.exe windows x86
efcf8c179b634be486e0956724259f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z
kernel32
GetUserDefaultLCID
TlsFree
TlsAlloc
VerLanguageNameW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW
ddraw
DirectDrawCreateEx
DirectDrawCreate
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ