Static task
static1
Behavioral task
behavioral1
Sample
ffe5c3e1118062005f7c2d24a10ef42ee0c29895533e19b999045e2594e683db.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffe5c3e1118062005f7c2d24a10ef42ee0c29895533e19b999045e2594e683db.exe
Resource
win10v2004-20221111-en
General
-
Target
ffe5c3e1118062005f7c2d24a10ef42ee0c29895533e19b999045e2594e683db
-
Size
282KB
-
MD5
96c4aa7c920032248a8c0fef9f7f240b
-
SHA1
69f0162bd796e8ced28016f6c2c5f52415c6b834
-
SHA256
ffe5c3e1118062005f7c2d24a10ef42ee0c29895533e19b999045e2594e683db
-
SHA512
124df93991005c5da1e124905a20d3b9ad5f8dcf06004c2426eb6edbfb75561728aa4fef2419501548de30985ae2e657fd8b5518f954ef01f737ee0ffa449ee6
-
SSDEEP
6144:cTar6XM1p/RArGawgY4NjK2rfLr2R1SyP:ka7/+GIR7rT6UyP
Malware Config
Signatures
Files
-
ffe5c3e1118062005f7c2d24a10ef42ee0c29895533e19b999045e2594e683db.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dfrgfmw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE