Static task
static1
Behavioral task
behavioral1
Sample
ff0f2c93b0c6c153c2d5bf13b6e445b06246db03fb1f67ed85befd1221b77563.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff0f2c93b0c6c153c2d5bf13b6e445b06246db03fb1f67ed85befd1221b77563.exe
Resource
win10v2004-20220812-en
General
-
Target
ff0f2c93b0c6c153c2d5bf13b6e445b06246db03fb1f67ed85befd1221b77563
-
Size
193KB
-
MD5
cc977edc1be041d573e91c954ad4cd19
-
SHA1
397cc2f486ac479a8b5dcd77d8cbcda5aa495637
-
SHA256
ff0f2c93b0c6c153c2d5bf13b6e445b06246db03fb1f67ed85befd1221b77563
-
SHA512
b903394449ac5a796f4a4bd7f644cde7b5bd46f07fa98dbed8503e959586a1c99893a61f5055a3ea3a6a39361fd154d21a3de39c4c4b46e9be5266d529a38757
-
SSDEEP
6144:hPNOMgquOBnexKvXIwmiptfE6MsqfaQb6w+:hPNOMgquOBxPIXiLf4sqfl+
Malware Config
Signatures
Files
-
ff0f2c93b0c6c153c2d5bf13b6e445b06246db03fb1f67ed85befd1221b77563.exe windows x86
0bff67a795cd0ee2a32763eb315ea951
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
GetCurrentProcess
ExitProcess
LCMapStringA
LoadLibraryA
user32
SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA
advapi32
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
Sections
.text Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ