Static task
static1
Behavioral task
behavioral1
Sample
cf2890a06812a92dfed23ab4a74fa2357b51933e7b9060769f9cf2022f450bd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf2890a06812a92dfed23ab4a74fa2357b51933e7b9060769f9cf2022f450bd8.exe
Resource
win10v2004-20220812-en
General
-
Target
cf2890a06812a92dfed23ab4a74fa2357b51933e7b9060769f9cf2022f450bd8
-
Size
78KB
-
MD5
764fc0641f397ad750fd6a32ca826414
-
SHA1
e98cf8cab993244d3bbd5c40eff2d2edef92264b
-
SHA256
cf2890a06812a92dfed23ab4a74fa2357b51933e7b9060769f9cf2022f450bd8
-
SHA512
542b38b1024a94b3fc4706e2bea1f6a4bc168ab964229e85a74e80d4926135a8ff1e48ef82f33d76239c750931c8336c56c3093f247b69b2ee851810f3baff98
-
SSDEEP
1536:70kvKEXkW6g2TZEZjureGKEsj4JoU9AZkLcG2rrxcJRpi+Ug:7hvVkWbWyEsUGZkLcVGH4Pg
Malware Config
Signatures
Files
-
cf2890a06812a92dfed23ab4a74fa2357b51933e7b9060769f9cf2022f450bd8.exe windows x86
bb60580c831d0fcfefaccd3e2ac9b432
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
Sections
Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uboemffz Size: 654KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hrkpctev Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE