Static task
static1
Behavioral task
behavioral1
Sample
cfd176d05b73507d95102995babb73f9cf12edc7e0531245a5d6e5ede9579cbb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfd176d05b73507d95102995babb73f9cf12edc7e0531245a5d6e5ede9579cbb.exe
Resource
win10v2004-20220812-en
General
-
Target
cfd176d05b73507d95102995babb73f9cf12edc7e0531245a5d6e5ede9579cbb
-
Size
507KB
-
MD5
e74879265ab88ef6d462bf4371f5e137
-
SHA1
1a0292103d61e99e5c6ef6a48d33fce8c66b4a99
-
SHA256
cfd176d05b73507d95102995babb73f9cf12edc7e0531245a5d6e5ede9579cbb
-
SHA512
75f34b9d9751c38ebcb745a421f05e7c418a9b9079cfc55ffd7e6d5e115c25c2101714a85ad42ef06a50b775616e803c301533658efdd5b2db75a140c5281644
-
SSDEEP
12288:WeecBnRkFy6FRjYkfKteDDdie1qyfuyBTO/0AVS:Wc3l6bZF1qTytO/0AVS
Malware Config
Signatures
Files
-
cfd176d05b73507d95102995babb73f9cf12edc7e0531245a5d6e5ede9579cbb.exe windows x86
f67059eba5408af638688cdf932ccee1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
OpenFile
OpenFile
GetLocalTime
GetDateFormatW
GetModuleHandleA
TerminateProcess
WriteFile
GetLastError
ReadFile
Sleep
lstrcpynW
GetLastError
GetCPInfo
GetCommandLineW
GetDateFormatW
OpenFile
Sleep
lstrcpynW
GetLocalTime
GetDateFormatW
Sleep
GetStartupInfoA
GetDateFormatW
GetTimeFormatW
ReadFile
lstrcpynW
GetCPInfo
ReadFile
GetLocalTime
lstrcmpW
lstrcmpW
GetFileSize
MulDiv
GetDateFormatW
GetCPInfo
lstrcpynW
GetModuleHandleA
GetLastError
TerminateProcess
Sections
.text Size: 68KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test3 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.reloc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 802B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ