Static task
static1
Behavioral task
behavioral1
Sample
ffac9cd1828a7c6ebeb945da23a6c8246d529f17f7f09170293efb52ddbaad7d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffac9cd1828a7c6ebeb945da23a6c8246d529f17f7f09170293efb52ddbaad7d.exe
Resource
win10v2004-20221111-en
General
-
Target
ffac9cd1828a7c6ebeb945da23a6c8246d529f17f7f09170293efb52ddbaad7d
-
Size
555KB
-
MD5
228c72f53b93de70dac53e40c1fa3f44
-
SHA1
8bed886655325cd20bc432038ec9fd5e5f20d562
-
SHA256
ffac9cd1828a7c6ebeb945da23a6c8246d529f17f7f09170293efb52ddbaad7d
-
SHA512
9a59ed295fb3e18ca53503b6dc576ae32eeae36e7ad7c34ac6fde4d15375764925f03fe9162dc150d1931664ad749b99752bcaa8001b574d83b06ddb6a0293ff
-
SSDEEP
12288:KlHwjuZSosrP+dtrcefwLNIhT+c2FRrZCcHuy:gH3BKmdnGubwlTHuy
Malware Config
Signatures
Files
-
ffac9cd1828a7c6ebeb945da23a6c8246d529f17f7f09170293efb52ddbaad7d.exe windows x86
7bfd3df701fa955605ced3b866dcb31e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
FindClose
FindFirstFileA
GetTickCount
GetTempPathA
RemoveDirectoryA
FindNextFileA
DeleteFileA
SetFileAttributesA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
GetEnvironmentStrings
GetEnvironmentStringsW
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
WaitForSingleObject
CreateProcessA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetLastError
GetFileType
CreateDirectoryA
WriteFile
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetEndOfFile
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
user32
MessageBoxA
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ