Static task
static1
Behavioral task
behavioral1
Sample
ffe0f5260b281c92f53690dce46e92a1de890cd59a3f8c05f188e2742e4c92e5.exe
Resource
win7-20220901-en
General
-
Target
ffe0f5260b281c92f53690dce46e92a1de890cd59a3f8c05f188e2742e4c92e5
-
Size
172KB
-
MD5
63e4d2c7220d58f28f62a30ca0d1b6d0
-
SHA1
5c8b157ce859d8000b040ebeb735e29b2e9e0e55
-
SHA256
ffe0f5260b281c92f53690dce46e92a1de890cd59a3f8c05f188e2742e4c92e5
-
SHA512
850c9b53c2789a87015b9452efc48b76a03035f74af076cd76533309a67eac6bcba2812a32857595da60bc5d505ea2263fe93126c941dcda0afcbb7231aa23de
-
SSDEEP
3072:25jlXRFSICa6HcA15RWm2JL7l0f4GDH9MVQu69f8w/D2X4hrOta24M2g4Y1:Oj1RFSI25MmoLh0grK/DQQ/M1
Malware Config
Signatures
Files
-
ffe0f5260b281c92f53690dce46e92a1de890cd59a3f8c05f188e2742e4c92e5.exe windows x86
e3744ebb99a88d453ddaeed7890c0ccc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
ReadFile
SetEndOfFile
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetACP
IsBadWritePtr
HeapReAlloc
VirtualAlloc
FlushFileBuffers
CreateFileA
VirtualFree
HeapCreate
GetLocaleInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
CloseHandle
HeapFree
SetFilePointer
GetLastError
GetCurrentProcess
TerminateProcess
ExitProcess
LoadLibraryA
GetProcAddress
VirtualAllocEx
lstrcpynW
GetSystemInfo
GlobalSize
SetStdHandle
InitializeCriticalSection
GetConsoleCP
GetCommandLineW
HeapAlloc
FindFirstFileW
lstrcatW
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FindClose
LeaveCriticalSection
FindNextFileW
SetUnhandledExceptionFilter
GetOEMCP
GetCurrentThreadId
EnumSystemLocalesA
WaitForMultipleObjects
GetTickCount
GetTimeFormatW
TlsSetValue
ResumeThread
GetStringTypeW
HeapDestroy
VirtualProtect
user32
SendMessageW
DrawMenuBar
DestroyWindow
SetScrollRange
SetWindowsHookExW
GetWindowLongW
GetCursorPos
RedrawWindow
DeferWindowPos
DestroyAcceleratorTable
MessageBeep
MessageBoxW
DrawFocusRect
GetMenuItemCount
SetMenu
SetWindowLongW
EnableWindow
EndPaint
ScrollWindow
DeleteMenu
DrawTextExW
CharUpperW
SetDlgItemInt
EnableMenuItem
ModifyMenuW
LoadImageW
IsDialogMessageA
IsIconic
DrawFrameControl
GetWindowPlacement
InvalidateRect
SetWindowPlacement
SetParent
GetDC
ReleaseCapture
GetMessageA
DragDetect
SetForegroundWindow
DestroyCaret
GetMenu
IsWindowVisible
gdi32
BitBlt
SaveDC
Rectangle
SelectObject
CreateSolidBrush
AddFontResourceW
GetROP2
SetTextColor
SetTextAlign
SetWindowOrgEx
DeleteObject
RestoreDC
StartDocW
comdlg32
ChooseColorA
GetFileTitleW
FindTextA
GetSaveFileNameA
GetOpenFileNameA
ReplaceTextW
ChooseFontW
PageSetupDlgA
PrintDlgW
ChooseFontA
GetFileTitleA
GetOpenFileNameW
ReplaceTextA
PageSetupDlgW
FindTextW
GetSaveFileNameW
ChooseColorW
PrintDlgA
advapi32
RegOpenKeyExA
RegCreateKeyA
RegEnumKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueW
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteValueA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ