Static task
static1
Behavioral task
behavioral1
Sample
cfdbae0367f0e807f38d88d7b682780685ac8b6fb967a9faa33b3a70e0bad71f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfdbae0367f0e807f38d88d7b682780685ac8b6fb967a9faa33b3a70e0bad71f.exe
Resource
win10v2004-20220901-en
General
-
Target
cfdbae0367f0e807f38d88d7b682780685ac8b6fb967a9faa33b3a70e0bad71f
-
Size
33KB
-
MD5
49a0196f616cd80efc44ac8e39906cab
-
SHA1
18d249b8704bd13db83a99c907fb782d13558d18
-
SHA256
cfdbae0367f0e807f38d88d7b682780685ac8b6fb967a9faa33b3a70e0bad71f
-
SHA512
59c154ac7053ff5e8ade969572e86fb86fb92ac5c605ee92ab5949f273fb2f4a12958450fd69190a23fdb8a552efad209504708f807a97fc1f4dfa16512c61e0
-
SSDEEP
384:k25946iScBkBnP6c4X4loGv3nU3f/eCk73zyyyyyyyyyyyyyyyyyyyyyGi87dgpH:b59XQkBP3w/l3fPATRteQNLI+XY
Malware Config
Signatures
Files
-
cfdbae0367f0e807f38d88d7b682780685ac8b6fb967a9faa33b3a70e0bad71f.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 7KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE