Static task
static1
Behavioral task
behavioral1
Sample
cd1ce709fabcd8312470553e6c9a78336631c0c2cdcb7489dfbd8f5bd3ce5130.exe
Resource
win7-20220718-en
General
-
Target
cd1ce709fabcd8312470553e6c9a78336631c0c2cdcb7489dfbd8f5bd3ce5130
-
Size
939KB
-
MD5
c83d9e6e41902a70eb1b8f188cc8eb59
-
SHA1
a9827e9089a5011099d5755f5c9d6ef9afa2247e
-
SHA256
cd1ce709fabcd8312470553e6c9a78336631c0c2cdcb7489dfbd8f5bd3ce5130
-
SHA512
dd3d54830e0131f968d3a7e4e9e285aea46688d6b509be3b715c2a8ba728fb3805e52247d0b67b622f3cf2f3c3531eac9a5339bd7525761db85cb94db54fe6fd
-
SSDEEP
6144:kSNCm6jPvKX2Z1nkEX1sXd+icc3DIu2eUYdDD9sUp0LZbXKPiUL3lKEWOfV0X2Uf:kYpMv1FGGLtra0DR3qE9Ny0ke
Malware Config
Signatures
Files
-
cd1ce709fabcd8312470553e6c9a78336631c0c2cdcb7489dfbd8f5bd3ce5130.exe windows x86
b04baba445a26c75bc391660277a6bbd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetLastError
GetFileType
VirtualQuery
ConnectNamedPipe
MapUserPhysicalPagesScatter
GetACP
EnumDateFormatsW
AddConsoleAliasW
VirtualProtect
GetFileSize
GlobalAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
advapi32
RegDeleteValueW
EnumDependentServicesW
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yopev Size: 512B - Virtual size: 290B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 845KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 49.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heye Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ