Static task
static1
Behavioral task
behavioral1
Sample
ff639e702d2d321f1164e4bc45d4ca1e060a7b236e7e331c9a4d36652afcdb88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff639e702d2d321f1164e4bc45d4ca1e060a7b236e7e331c9a4d36652afcdb88.exe
Resource
win10v2004-20220812-en
General
-
Target
ff639e702d2d321f1164e4bc45d4ca1e060a7b236e7e331c9a4d36652afcdb88
-
Size
25KB
-
MD5
644faa806bc8acb48c25d7e2c4fbb6fa
-
SHA1
72b0b0412733ab938e1241893afb9d41ff8fae1b
-
SHA256
ff639e702d2d321f1164e4bc45d4ca1e060a7b236e7e331c9a4d36652afcdb88
-
SHA512
4047a925dcafb0c8fb4a1a462e28ad07eaae6f13f9000131bde6e52366a4ac2dd52f2041e78dd7ce2474f42edc6414cd5199887152bf581486de2e8df54ac8ca
-
SSDEEP
384:dh+iMDmuq48yRTNWs83ToMZbZdwMkehz+WXgWlphZjiBbk7DJOMivMMFQz:3D0hq/Dn1rh7HphOA7FXc
Malware Config
Signatures
Files
-
ff639e702d2d321f1164e4bc45d4ca1e060a7b236e7e331c9a4d36652afcdb88.exe windows x86
2abadece9c7fabb46c0929f9ea464b69
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyW
SHDeleteValueW
msvcrt
_CxxThrowException
_vsnwprintf
wcscmp
memmove
wcslen
_wcsrev
_c_exit
_XcptFilter
_initterm
_adjust_fdiv
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
_except_handler3
?terminate@@YAXXZ
kernel32
LoadLibraryA
GlobalAlloc
GlobalCompact
MulDiv
GlobalLock
GlobalUnlock
lstrcpynW
ResetEvent
CreateEventW
GetCommandLineW
LocalAlloc
GetProfileStringW
LocalFree
GetUserDefaultLCID
FileTimeToSystemTime
GetCurrentDirectoryW
SystemTimeToFileTime
GetLocalTime
SetEvent
GlobalReAlloc
gdi32
CreateFontIndirectW
GetDIBits
IntersectClipRect
CreateSolidBrush
GetTextExtentPoint32W
CreateCompatibleDC
GetStockObject
StretchBlt
CreateDIBSection
user32
SetDlgItemInt
CheckDlgButton
IsClipboardFormatAvailable
CallNextHookEx
EndMenu
InflateRect
FillRect
TrackPopupMenuEx
CharNextA
CloseClipboard
GetSysColor
MessageBeep
GetMenu
LoadIconW
MoveWindow
EnumChildWindows
SetWindowPos
GetSystemMetrics
GetClientRect
EnableMenuItem
CheckMenuRadioItem
OffsetRect
LoadMenuW
GetDlgItem
ole32
CoInitializeEx
Sections
.idata Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ