Static task
static1
Behavioral task
behavioral1
Sample
cfd53d04f18f5900bf01a90d784b81f89916ec81e47b3cd39fae5f28411ba16c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfd53d04f18f5900bf01a90d784b81f89916ec81e47b3cd39fae5f28411ba16c.exe
Resource
win10v2004-20220812-en
General
-
Target
cfd53d04f18f5900bf01a90d784b81f89916ec81e47b3cd39fae5f28411ba16c
-
Size
148KB
-
MD5
3a6fbc3bc231bcf81f935d54de9e10c0
-
SHA1
69fbea1d18c160e0350997e02751829dcddc7b54
-
SHA256
cfd53d04f18f5900bf01a90d784b81f89916ec81e47b3cd39fae5f28411ba16c
-
SHA512
fde78462c37279e3426d3d2a7bb215fc47123c27bb90f41c3264990359b9af580731a9073a7a02c2db4261f293816a039045d6c670d60b6ae567e68addaefdff
-
SSDEEP
3072:D6Xz7GbZrvL7hhNO4M33JWJTgx2FaJ0Cl1c:DBtXRMJqgxCCc
Malware Config
Signatures
Files
-
cfd53d04f18f5900bf01a90d784b81f89916ec81e47b3cd39fae5f28411ba16c.exe windows x86
a5cc54b02ff5a605587f5b0083c00b0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
userenv
GetUserProfileDirectoryA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
SetEndOfFile
GetLocaleInfoW
SetStdHandle
LoadLibraryA
GetLastError
CloseHandle
ReadFile
CreateFileA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
MultiByteToWideChar
DeleteFileA
InterlockedDecrement
SetFileAttributesA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetModuleFileNameA
Sleep
GetVersion
WinExec
WriteFile
GetTempPathA
CopyFileA
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
GetCurrentProcess
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
LocalFree
VirtualAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
RaiseException
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
GetCPInfo
LCMapStringW
GetModuleHandleA
GetProcAddress
RemoveDirectoryA
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
InterlockedIncrement
GetProcessHeap
HeapSize
LCMapStringA
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
GetStartupInfoA
user32
wsprintfA
SetTimer
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
comdlg32
GetFileTitleA
advapi32
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
RegSetValueExA
RegCloseKey
shell32
SHGetPathFromIDListA
SHGetDesktopFolder
ShellExecuteA
SHGetMalloc
ole32
CoInitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
oleaut32
SysAllocStringLen
VariantClear
VariantInit
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
shlwapi
PathFileExistsA
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE