Static task
static1
Behavioral task
behavioral1
Sample
ff997d5981a6017cfbe2c163fd3e25b26c696d56d5a0c1a5fe5226ebf741e055.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff997d5981a6017cfbe2c163fd3e25b26c696d56d5a0c1a5fe5226ebf741e055.exe
Resource
win10v2004-20220812-en
General
-
Target
ff997d5981a6017cfbe2c163fd3e25b26c696d56d5a0c1a5fe5226ebf741e055
-
Size
59KB
-
MD5
f84d2a63c9a08ff4621f714c9569d761
-
SHA1
f987579ac6256f9fd58593da49d06f48390de8ac
-
SHA256
ff997d5981a6017cfbe2c163fd3e25b26c696d56d5a0c1a5fe5226ebf741e055
-
SHA512
b3dffb9975f1d70470ef0cf82450ae2cc13f954c1153b5857902f307126828e3ccb793857273ebfb7d0e24b623fb7ba0bc1137930d6b87d01ee11d43ed66323b
-
SSDEEP
1536:Z8yEPcoTXnmoj28EvL3CI+Ec779cuTy1:ZFAcEmojIvGITc77Xm1
Malware Config
Signatures
Files
-
ff997d5981a6017cfbe2c163fd3e25b26c696d56d5a0c1a5fe5226ebf741e055.exe windows x86
6a9b33308ba698c4e63e397db06e817b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
ReadFileEx
GetStartupInfoW
lstrcatA
LeaveCriticalSection
InterlockedExchange
LoadLibraryA
CloseHandle
SetConsoleTitleW
SetFileTime
CreateEventW
IsBadWritePtr
GetLastError
GetStringTypeA
GetFileSize
lstrcpyW
HeapCreate
GetExitCodeProcess
GetModuleHandleA
HeapSize
SetFileTime
mstscax
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllRegisterServer
shell32
SHFree
DragFinish
DragQueryFileA
SHGetMalloc
SHGetDiskFreeSpaceA
DllUnregisterServer
ShellAboutA
DragAcceptFiles
StrChrA
ExtractIconA
SHGetSettings
ShellMessageBoxW
DuplicateIcon
rasapi32
DwRasUninitialize
Sections
.text Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ