Static task
static1
Behavioral task
behavioral1
Sample
fff4a28ae1cba38c0a3e21a6bf96fbb024dd35859328204a8c76555523a8bba4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fff4a28ae1cba38c0a3e21a6bf96fbb024dd35859328204a8c76555523a8bba4.exe
Resource
win10v2004-20221111-en
General
-
Target
fff4a28ae1cba38c0a3e21a6bf96fbb024dd35859328204a8c76555523a8bba4
-
Size
96KB
-
MD5
c5a7b2e8b64dceaaa2f2103b8b0f60ff
-
SHA1
6e473226d46ea1ecacdd0bcc8ee6b1c5699b6044
-
SHA256
fff4a28ae1cba38c0a3e21a6bf96fbb024dd35859328204a8c76555523a8bba4
-
SHA512
fdcfdfce5dfcfaf6fc94edab7b2f3923421b39629048fb959129c2159413977909285ebbf2025c6d804d18d88f3e2ba4694b2b56efeff019c0c2ff1a99ceab37
-
SSDEEP
3072:1D+xQVDubh1Un8m8BeIOSeiENmOdT2GusIKpvVAOv/5T3Eoj7FHgqibOCCwnkC5U:YxQW1Un39SeiENmOdT2GusIKpvVAOv/X
Malware Config
Signatures
Files
-
fff4a28ae1cba38c0a3e21a6bf96fbb024dd35859328204a8c76555523a8bba4.exe windows x86
0dcf5b0beb3f05ef4db3388d221273c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
CloseHandle
CreateSemaphoreA
ExitProcess
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindAtomA
GetAtomNameA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
InterlockedDecrement
InterlockedIncrement
ReadConsoleInputA
ReadConsoleOutputA
ReleaseSemaphore
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteConsoleOutputA
WriteConsoleOutputCharacterA
msvcrt
_close
_filelength
_getch
_open
_read
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fclose
fopen
fread
free
malloc
memcpy
printf
puts
realloc
signal
strcmp
strcpy
strlen
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 128B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 512B - Virtual size: 70B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
/108 Size: 1024B - Virtual size: 776B
IMAGE_SCN_MEM_DISCARDABLE