Static task
static1
Behavioral task
behavioral1
Sample
ffb2d564528a2a3cdeaeab48d069f0a100a569698788f02631d3395ae1c525a4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffb2d564528a2a3cdeaeab48d069f0a100a569698788f02631d3395ae1c525a4.exe
Resource
win10v2004-20220901-en
General
-
Target
ffb2d564528a2a3cdeaeab48d069f0a100a569698788f02631d3395ae1c525a4
-
Size
305KB
-
MD5
b156013097274d1599998a21ededa5e9
-
SHA1
4b8dffc0e721c890688136212f9f10cf01ac1565
-
SHA256
ffb2d564528a2a3cdeaeab48d069f0a100a569698788f02631d3395ae1c525a4
-
SHA512
73c542b25e9b8543aa2e732388f9f92398f51efa018f6252189ddcaaf7217bc1233bdde9712f0d400cb0bed9d37b6a58a7c2f6ca8121bbb04c2fd1705aec22da
-
SSDEEP
6144:AWdO9U9Nyj6LPc26IKXzrDIFR3lQbBjnEVCNG9tYa7KGZMGnrPg:AmO9UX26LPbKXDI5l25nK/9OauGZMGL
Malware Config
Signatures
Files
-
ffb2d564528a2a3cdeaeab48d069f0a100a569698788f02631d3395ae1c525a4.exe windows x86
6e279b6688fed2a306c8c57e63db4043
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetPrivateProfileStringA
HeapCreate
GetDriveTypeA
LoadLibraryW
TlsGetValue
InitializeCriticalSection
ReleaseMutex
GetCurrentProcessId
CreateEventW
FindClose
IsBadStringPtrW
GetCurrentThreadId
LocalFree
WriteFile
GlobalFlags
FindAtomA
ReleaseMutex
GetEnvironmentVariableW
GetFileTime
user32
EndDialog
GetSysColor
DrawTextA
GetKeyboardType
GetClientRect
GetClassInfoA
SetFocus
GetSysColor
IsWindow
DispatchMessageA
CreateWindowExA
CallWindowProcW
DrawStateW
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ