Clivfatn
Static task
static1
Behavioral task
behavioral1
Sample
cfed67ade61f908f6fa48f021184043fe49deb63eee06a596cb355f4fff37ded.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cfed67ade61f908f6fa48f021184043fe49deb63eee06a596cb355f4fff37ded.exe
Resource
win10v2004-20220901-en
General
-
Target
cfed67ade61f908f6fa48f021184043fe49deb63eee06a596cb355f4fff37ded
-
Size
105KB
-
MD5
80e8587849b8df7961d4015f40e384b4
-
SHA1
a007afd499b1efd4ba4fd71ba0c7ca9cb76e6ef8
-
SHA256
cfed67ade61f908f6fa48f021184043fe49deb63eee06a596cb355f4fff37ded
-
SHA512
bdc26085e9ed1e3eedc7af872e1d6e1d7c367fd3b988120e034c601184d0b99e1dde341171a8febd98baff32c0ccc6f27e4db8799265a081dcc75264f874b64d
-
SSDEEP
3072:lrpTi1thXE+g7ZMgcfrAw3pFY3N1kUER:j21tOdMlRXYd1kV
Malware Config
Signatures
Files
-
cfed67ade61f908f6fa48f021184043fe49deb63eee06a596cb355f4fff37ded.exe windows x86
536e051eb38b51f0d913ca189fd9c74f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetTempPathA
CloseHandle
GetStartupInfoA
VirtualProtect
FatalExit
user32
IsDlgButtonChecked
GetUpdateRgn
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.datatxt Size: 8KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdsec Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ