Static task
static1
Behavioral task
behavioral1
Sample
ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8.exe
Resource
win7-20221111-en
General
-
Target
ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8
-
Size
71KB
-
MD5
fc2a4d006ed5a27502742ce6236ab6ff
-
SHA1
e6242d145aa233eb620566db530287772dcde757
-
SHA256
ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8
-
SHA512
020488198235bf287994eaf9e70b128324add9c3e409c2d4c76131807eb30192a1b75e9442cc84ee001f1b92507032a9d0dc045dcf75d7fd18434dc4caffaf8a
-
SSDEEP
1536:F1LUTopFH5qj6HTgSqKo5umXqTXiV5DfDXfMtiu:zAop/qmHwETXyrDXo
Malware Config
Signatures
Files
-
ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8.exe windows x86
b3f0192ab62b4ece94de31102768e3a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ctl3d32
Ctl3dUnregister
Ctl3dEnabled
Ctl3dRegister
Ctl3dGetVer
untfs
Recover
FormatEx
Extend
Chkdsk
shlwapi
PathCompactPathA
UrlGetLocationA
UrlHashA
UrlCanonicalizeA
UrlCreateFromPathA
UrlIsA
UrlUnescapeA
UrlCombineA
PathIsRootA
UrlCompareA
kernel32
SetEnvironmentVariableA
lstrcpyW
CopyFileW
InterlockedIncrement
WriteProcessMemory
LoadLibraryExW
FindFirstFileA
OpenThread
UpdateResourceA
VirtualAlloc
GetModuleHandleA
CreateSemaphoreW
GetTickCount
CreateMailslotA
CreateThread
OpenJobObjectA
WriteConsoleA
CreateFileA
OpenJobObjectW
SystemTimeToFileTime
MoveFileA
certcli
CAEnumFirstCA
CADeleteCA
CACloseCA
CAEnumNextCA
CACloseCertType
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE