Static task
static1
Behavioral task
behavioral1
Sample
cfda0c2efa87368b7dbc781fe7ead3f69436109f7c001b8e2f1e4c4ed0517daf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfda0c2efa87368b7dbc781fe7ead3f69436109f7c001b8e2f1e4c4ed0517daf.exe
Resource
win10v2004-20220812-en
General
-
Target
cfda0c2efa87368b7dbc781fe7ead3f69436109f7c001b8e2f1e4c4ed0517daf
-
Size
1.0MB
-
MD5
ee5ce51a386ca6fbd61470946a321803
-
SHA1
edc07f7d2800c244cc3be95ba368dc2b4f6473f7
-
SHA256
cfda0c2efa87368b7dbc781fe7ead3f69436109f7c001b8e2f1e4c4ed0517daf
-
SHA512
b22905d203a7220d7b6cc29fa1686800ed99d609054a9d23c92a8e5dfa7bc94089788f14aa1a5be31c8ca9b2f6e311b79de0dda0bc44e3173144b6f53dfe49fc
-
SSDEEP
24576:SHut+ket9dPdyrzu2sTd7QUj4LrgVmipLoj/momCHRfDjcKdJtpZ:0ut+l9dPYEp7QXnSMzZ
Malware Config
Signatures
Files
-
cfda0c2efa87368b7dbc781fe7ead3f69436109f7c001b8e2f1e4c4ed0517daf.exe windows x86
ed4e0b4d2bc33096ffdead09e0c3e1d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sleep
GetVersionExA
FreeLibrary
LocalFree
LocalAlloc
GetLastError
GetVersion
GetTickCount
GlobalAlloc
CloseHandle
GetFileSize
lstrcatA
msvcrt
memmove
_initterm
__p__commode
_exit
wcstoul
wcslen
_acmdln
__set_app_type
_adjust_fdiv
__p__fmode
_c_exit
toupper
_except_handler3
__getmainargs
exit
_XcptFilter
rand
__setusermatherr
__CxxFrameHandler
wcschr
user32
BeginPaint
GetMessageA
GetFocus
DispatchMessageA
EndPaint
PostQuitMessage
LoadIconA
gdi32
ExtTextOutA
SetPixel
MoveToEx
SetBkMode
SetROP2
CreateCompatibleDC
SelectObject
GetStockObject
GetDeviceCaps
CreateFontIndirectA
GetBkColor
LineTo
GetObjectA
DeleteObject
CreateSolidBrush
GetTextColor
Sections
.text Size: 1024B - Virtual size: 957B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1018KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ