Static task
static1
Behavioral task
behavioral1
Sample
cfd482743da45910d815e524ccd51710d716243460a669967254e6acd6a26549.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfd482743da45910d815e524ccd51710d716243460a669967254e6acd6a26549.exe
Resource
win10v2004-20220901-en
General
-
Target
cfd482743da45910d815e524ccd51710d716243460a669967254e6acd6a26549
-
Size
113KB
-
MD5
a0c70bda407c2c3c87101804a08a6929
-
SHA1
166b9d6e0316e8b9678a0a3fc9cce940881943db
-
SHA256
cfd482743da45910d815e524ccd51710d716243460a669967254e6acd6a26549
-
SHA512
45621238bbab055182b153f6c5a066a95f2677ed55951ca3222af6837001ce70aa272e052c7b0f996e34ef1d18fafc63b350a3807b4a8535dbf786fd8bb27ab9
-
SSDEEP
768:bObkBqK5nO4rGQzTGfqc33emu4v/eo4z7VP7LdGSu2HyTAzfMgTAzfM0CAPfHXcQ:bGNQhd54vVfs7KKMCA65OUAT0jMyR
Malware Config
Signatures
Files
-
cfd482743da45910d815e524ccd51710d716243460a669967254e6acd6a26549.exe windows x86
e3e81cdbdc955db65b24683e5d339271
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CreateProcessA
CreateDirectoryA
_lopen
GetTempPathA
CloseHandle
WriteFile
LockResource
CreateFileA
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetStartupInfoA
user32
LoadStringA
shell32
ShellExecuteExA
SHChangeNotify
msvcrt
_controlfp
strstr
sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ