Static task
static1
Behavioral task
behavioral1
Sample
ff04b0e247c8cf19965a3a0eea1cdc8f963cea22451af1df63d37562b9d8cf50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff04b0e247c8cf19965a3a0eea1cdc8f963cea22451af1df63d37562b9d8cf50.exe
Resource
win10v2004-20220812-en
General
-
Target
ff04b0e247c8cf19965a3a0eea1cdc8f963cea22451af1df63d37562b9d8cf50
-
Size
112KB
-
MD5
2900a15d6457b093f89a5abdae0f5610
-
SHA1
7ad03207f8e188e8f830c8888cb07a69168b0685
-
SHA256
ff04b0e247c8cf19965a3a0eea1cdc8f963cea22451af1df63d37562b9d8cf50
-
SHA512
6bba8c7f5ef60a0b83380b787f62fe5c6c5dc8c33c8fbdc91e6611a3d036e0bf4108052215c7a789a13582b12aca0a423f1f912675b82a039ae8062d28f20688
-
SSDEEP
1536:Va5XdpktLhfOFKSPHjozjXsLTZVTlBS9JFKKDCmop9ua:w5XdWhfSv2X59JF9DJop9
Malware Config
Signatures
Files
-
ff04b0e247c8cf19965a3a0eea1cdc8f963cea22451af1df63d37562b9d8cf50.exe windows x86
894e6913cec38d569e6765be9e480fed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FreeResource
CloseHandle
WriteFile
CreateFileA
GetEnvironmentVariableA
LockResource
LoadResource
SizeofResource
FindResourceA
WinExec
ExitProcess
GetSystemDirectoryA
GetModuleFileNameA
user32
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
msvcrt
strcat
strcpy
fclose
fread
fseek
fopen
fwrite
memset
Sections
.text Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ