Static task
static1
Behavioral task
behavioral1
Sample
cfd88b1686fdd20f246f0e444b59d08edb500ba9f21e2f93e551ffb09a19b544.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfd88b1686fdd20f246f0e444b59d08edb500ba9f21e2f93e551ffb09a19b544.exe
Resource
win10v2004-20220812-en
General
-
Target
cfd88b1686fdd20f246f0e444b59d08edb500ba9f21e2f93e551ffb09a19b544
-
Size
128KB
-
MD5
ca843b9b1556b8b56f2cf707e4c0bc69
-
SHA1
3e797921323993954efb810f01a2f7a349e59db2
-
SHA256
cfd88b1686fdd20f246f0e444b59d08edb500ba9f21e2f93e551ffb09a19b544
-
SHA512
c8ce38a58b06195644aa02fe531d27273517606dd15639b5d8171fa12c0b9336c11c3313e2299726f6642bc4d337cdec22939d6905871ff163da3e37cbf17df2
-
SSDEEP
3072:FiNH8iuaQkd9fpNvHt1B9OdBtx451syYI:w7jhNvqd/x4PsyYI
Malware Config
Signatures
Files
-
cfd88b1686fdd20f246f0e444b59d08edb500ba9f21e2f93e551ffb09a19b544.exe windows x86
42c79bd1b83df8eda96524bd7b6470ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExA
wsock32
gethostbyname
gethostname
accept
bind
htons
ioctlsocket
listen
closesocket
recv
send
connect
socket
WSACleanup
WSAGetLastError
WSAStartup
imagehlp
SearchTreeForFile
urlmon
URLDownloadToFileA
wininet
InternetGetConnectedState
DeleteUrlCacheEntryA
kernel32
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
CloseHandle
GetStdHandle
GetTickCount
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
CopyFileA
OpenFile
CreateDirectoryA
ReadFile
RtlUnwind
RtlZeroMemory
CreateFileA
SetCurrentDirectoryA
SetFilePointer
Sleep
WaitForSingleObject
WriteConsoleA
WriteFile
DeleteFileA
ExitProcess
FileTimeToDosDateTime
FindClose
FindFirstFileA
user32
wvsprintfA
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
crtdll
_itoa
__GetMainArgs
_splitpath
_strnicmp
calloc
exit
fclose
fflush
fopen
fread
free
fseek
ftell
fwrite
localtime
malloc
memcpy
memset
mktime
raise
signal
strcat
strchr
strcpy
strlen
strncmp
strncpy
strtok
Sections
pec1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE