Static task
static1
Behavioral task
behavioral1
Sample
ff849c25b2fdb35a5e1259e320f11b33cdf537d10138c7144c20be68aabf70f2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff849c25b2fdb35a5e1259e320f11b33cdf537d10138c7144c20be68aabf70f2.exe
Resource
win10v2004-20220812-en
General
-
Target
ff849c25b2fdb35a5e1259e320f11b33cdf537d10138c7144c20be68aabf70f2
-
Size
50KB
-
MD5
b6e78e4f5395f8f7e165683f8c4317fd
-
SHA1
e80d4f8555625fd25684b7bf9e731afd9fbd087d
-
SHA256
ff849c25b2fdb35a5e1259e320f11b33cdf537d10138c7144c20be68aabf70f2
-
SHA512
fd2c4f0313402fd6b539a01cc6cc60d294a5bdb4e30e021d8cf2d8fde3d3650b6b9464d935ff09c66f2f80bfd1cca7784a64e20a68d4e9bc662e99210743a8c2
-
SSDEEP
768:HCp/0m1BcUUPES4ThB57/M1xNDYvNXB9bsr0kqJMnCvrwm+7yz9G76J:6/H1Bc5MS4TlGxNMvhg0k1n6zE76
Malware Config
Signatures
Files
-
ff849c25b2fdb35a5e1259e320f11b33cdf537d10138c7144c20be68aabf70f2.exe windows x86
bd321b1e97ddda73ac525120a887a6ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
urlmon
URLDownloadToFileA
advapi32
RegCloseKey
shell32
ShellExecuteA
user32
CharNextA
oleaut32
SysFreeString
Sections
.text Size: 43KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE