Static task
static1
Behavioral task
behavioral1
Sample
ff86b12d214d14e32f2a1743e70200d2b4ca9ec0494a2d8ff3da2f4ec8ba5697.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff86b12d214d14e32f2a1743e70200d2b4ca9ec0494a2d8ff3da2f4ec8ba5697.exe
Resource
win10v2004-20220812-en
General
-
Target
ff86b12d214d14e32f2a1743e70200d2b4ca9ec0494a2d8ff3da2f4ec8ba5697
-
Size
63KB
-
MD5
8845bba8935413606a6269ea1a199dfc
-
SHA1
1ccd9fcb476aa95dd84852eb26e4ae6edf453a8a
-
SHA256
ff86b12d214d14e32f2a1743e70200d2b4ca9ec0494a2d8ff3da2f4ec8ba5697
-
SHA512
4332184a0e534cff55dff683ebfecc23242f235504eb9f0659806d3dc62c8555d8047c9292daecb64e75c1c0d7435d202447aa9207ffc70eda6696565d098077
-
SSDEEP
1536:Vil2iI0aFwfHPeuRirVTeeFipnkkJk/kvAChhNmC8cCwu1:Vil2iI0CIGuRirVTeeFipnkkJk/kvACn
Malware Config
Signatures
Files
-
ff86b12d214d14e32f2a1743e70200d2b4ca9ec0494a2d8ff3da2f4ec8ba5697.exe windows x86
f33e09fcc5f4ff1aaedadc0d8e6c56e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
esent
JetInit@4
JetDetachDatabase@8
JetGetSystemParameter@24
JetEndSession@8
JetRestore2@12
JetBeginSession@16
JetAttachDatabase@12
JetTerm2@8
JetSetSystemParameter@20
JetDBUtilities@4
JetCompact@24
kernel32
GlobalAlloc
CopyFileA
MoveFileExA
GlobalFree
ExpandEnvironmentStringsA
DeleteFileA
Sleep
FormatMessageA
GetLastError
GetTickCount
user32
MessageBoxA
advapi32
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
msvcrt
_getch
_XcptFilter
_assert
_strupr
strchr
printf
sprintf
exit
_initterm
_cprintf
_fullpath
atol
strtoul
_stricmp
_exit
__p__fmode
__p___initenv
__getmainargs
__set_app_type
__setusermatherr
_adjust_fdiv
__p__commode
_except_handler3
_controlfp
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE