Static task
static1
Behavioral task
behavioral1
Sample
ff99cfe296bd9a7ce6ccb2290359a254ab6609c4ef28dbba09c33909d35e2281.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ff99cfe296bd9a7ce6ccb2290359a254ab6609c4ef28dbba09c33909d35e2281.exe
Resource
win10v2004-20230220-en
General
-
Target
ff99cfe296bd9a7ce6ccb2290359a254ab6609c4ef28dbba09c33909d35e2281
-
Size
445KB
-
MD5
8ae8e2cfd5f94e991c2a215ffbe61fc5
-
SHA1
9fbc53205d304e263bd17ce078a32b6c06de8956
-
SHA256
ff99cfe296bd9a7ce6ccb2290359a254ab6609c4ef28dbba09c33909d35e2281
-
SHA512
ad4d1aa7efaf239d07218fcaf1da82054ce22fba7107f89e83929b2b41d9c51372ce5e022800b58b006df59b34d40684dc3411d53276e1e5ee77203ff2750eae
-
SSDEEP
12288:AS9g8/GG1EvpPOYMeNlgflxk364iX2I/knF6D5MViga+n7:968/GXvpPOYMeNlgf/k364iX2M6F6D5y
Malware Config
Signatures
Files
-
ff99cfe296bd9a7ce6ccb2290359a254ab6609c4ef28dbba09c33909d35e2281.exe windows x86
a905f82ec2fcfd8c784de9b012d64305
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHGetPathFromIDListW
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderLocation
kernel32
CreateFileA
FreeLibrary
GetProcessHeap
HeapAlloc
GetLastError
GetProcAddress
HeapFree
LoadLibraryW
GetModuleFileNameW
LocalFree
WaitForSingleObject
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
SetFileApisToOEM
GetCurrentProcess
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableW
SetThreadPriority
GetVersionExW
GetModuleHandleW
ExpandEnvironmentStringsW
CreateFileW
GetCommandLineW
DeleteFileW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
FormatMessageW
InterlockedExchangeAdd
SetEndOfFile
SetFileTime
WriteFile
SetFilePointer
GetFileSize
ReadFile
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MoveFileW
lstrlenW
GetTempPathW
GetFullPathNameW
GetWindowsDirectoryW
GetTempFileNameW
SetFileAttributesW
GetLongPathNameW
ResetEvent
CreateEventW
SetEvent
FindResourceW
FileTimeToSystemTime
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetACP
WaitForMultipleObjects
ResumeThread
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
user32
TranslateMessage
IsWindowVisible
EnableWindow
GetMessageW
KillTimer
DispatchMessageW
PostQuitMessage
CreateDialogParamW
ScreenToClient
DestroyIcon
IsWindow
ShowWindow
MessageBoxW
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetSystemMetrics
GetWindowTextW
SetWindowTextW
GetDlgItem
SendMessageW
EndDialog
SetFocus
LoadIconW
GetDesktopWindow
LoadStringW
SetTimer
IsDialogMessageW
gdi32
DeleteObject
CreateSolidBrush
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoInitialize
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ