Static task
static1
Behavioral task
behavioral1
Sample
ff396c63942f266d6616f7e09872e826193b544fbee2edb0592c0cbd13cfae9f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff396c63942f266d6616f7e09872e826193b544fbee2edb0592c0cbd13cfae9f.exe
Resource
win10v2004-20220812-en
General
-
Target
ff396c63942f266d6616f7e09872e826193b544fbee2edb0592c0cbd13cfae9f
-
Size
211KB
-
MD5
d756afaa10dca65f49e5c763e3639608
-
SHA1
db789e540bd7523a8a5af532e1b26a9961482cfb
-
SHA256
ff396c63942f266d6616f7e09872e826193b544fbee2edb0592c0cbd13cfae9f
-
SHA512
6338aa22854d442d94625dcb5579f96b0633399005870f68062d54d21aceab37b506070b0f7b5d9abf65e10d52fd55f6e8b9c517cfacb250491a99526f2dde05
-
SSDEEP
3072:0qYNh5OwtXfZTJBUsAo4YXm54XeYKXuMdftffjmNxoxSsr:0qYNhAsM2oeMtVfjmNyxSsr
Malware Config
Signatures
Files
-
ff396c63942f266d6616f7e09872e826193b544fbee2edb0592c0cbd13cfae9f.exe windows x86
7a5e9ff12472d1e5b5a4c16b165d75c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
DeleteFileA
GetModuleHandleA
comdlg32
GetFileTitleA
mfc42
ord6142
ord561
ord815
ord2818
ord858
ord4129
ord5710
ord6662
ord800
ord4160
ord540
ord1575
ord825
ord3701
ord500
ord772
ord941
ord860
ord537
ord6874
ord535
ord665
ord823
ord4204
ord354
ord1979
ord5442
ord3318
ord5186
ord3811
ord6877
ord5683
ord268
ord1567
ord939
ord926
ord5856
ord1158
ord3337
ord6663
ord859
ord2827
ord5860
msvcrt
isdigit
strncpy
sprintf
strrchr
pow
_ftol
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
sscanf
_XcptFilter
_strupr
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset
isalnum
strcmp
memcpy
__CxxFrameHandler
strlen
printf
_stricmp
_exit
exit
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1_Winit@std@@QAE@XZ
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ