Static task
static1
Behavioral task
behavioral1
Sample
ff6bdb44832f8120fc665eda0634be9dab25c5632ccbdbddd76078ae5ad4d0c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff6bdb44832f8120fc665eda0634be9dab25c5632ccbdbddd76078ae5ad4d0c4.exe
Resource
win10v2004-20221111-en
General
-
Target
ff6bdb44832f8120fc665eda0634be9dab25c5632ccbdbddd76078ae5ad4d0c4
-
Size
393KB
-
MD5
04408625772fb5fe93a349aa05d59f90
-
SHA1
7a4115b596916f9df14508fc6645a3222a621e90
-
SHA256
ff6bdb44832f8120fc665eda0634be9dab25c5632ccbdbddd76078ae5ad4d0c4
-
SHA512
24c135fdc3abede3543c3ca1d8642f54a8385a3d69b4e14807b7eeb703902a3be5097092ad2fcc0ed896391f8a3e71db0f01aafe4b3bfe889b99b0f7944709a6
-
SSDEEP
12288:eb3KpJI6xj1dV9fJcEXW4OYIb5IiENCad4DP:ebCb1dV9fJhXWGHNuj
Malware Config
Signatures
Files
-
ff6bdb44832f8120fc665eda0634be9dab25c5632ccbdbddd76078ae5ad4d0c4.exe windows x86
4b67af2fb79cd7f75e91bb97e2e565cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
LocalLock
GetModuleHandleA
TlsGetValue
FindAtomA
FreeEnvironmentStringsA
CreateFileA
GetACP
CreateFileMappingA
CloseHandle
GetCalendarInfoA
GetConsoleAliasA
Sleep
LoadLibraryExA
FindClose
GlobalUnlock
GetLastError
WaitForMultipleObjects
LocalFree
GetConsoleCP
user32
SetFocus
CascadeWindows
DrawTextA
CallWindowProcA
GetMessageA
DispatchMessageA
DefWindowProcA
GetIconInfo
GetDlgItem
DrawEdge
IsWindow
GetDC
CreateDialogParamA
MessageBoxA
msasn1
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull
ASN1BERDecSkip
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ