Static task
static1
Behavioral task
behavioral1
Sample
ffccaef1acf6739e858c27709e80e81795721f81e69378e31feaa5ca1f401866.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ffccaef1acf6739e858c27709e80e81795721f81e69378e31feaa5ca1f401866.exe
Resource
win10v2004-20221111-en
General
-
Target
ffccaef1acf6739e858c27709e80e81795721f81e69378e31feaa5ca1f401866
-
Size
144KB
-
MD5
702832d8e8f50e907463fc29348f9b40
-
SHA1
72be38c3c1a4d3f3ecd4f145090ea3526a98c277
-
SHA256
ffccaef1acf6739e858c27709e80e81795721f81e69378e31feaa5ca1f401866
-
SHA512
b6f8b4a78daac5049f426a66c592100c771c57a003bfe0a6a1ca30ec77ee7da9d5b2d2b6b46f4e86286488099e3d8c81ec53cc3615747c289d8bcd9d58e3b56c
-
SSDEEP
3072:cEv8bJ/Nj9prKYTmIsRbdZqMYlFTTwZEbdMYlszvbrV1zDix:981pcYTmBjYldtbcvHzm
Malware Config
Signatures
Files
-
ffccaef1acf6739e858c27709e80e81795721f81e69378e31feaa5ca1f401866.exe windows x86
08e7e14b400d2ea28fbc172b005d5cae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
comctl32
ImageList_Add
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
Sections
.MPRESS1 Size: 132KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE