Static task
static1
Behavioral task
behavioral1
Sample
ce8767136c81283c8c4e708e3f674837ae06c90bf0c094c30a9de881e8fa6c4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce8767136c81283c8c4e708e3f674837ae06c90bf0c094c30a9de881e8fa6c4d.exe
Resource
win10v2004-20220812-en
General
-
Target
ce8767136c81283c8c4e708e3f674837ae06c90bf0c094c30a9de881e8fa6c4d
-
Size
798KB
-
MD5
7b3ce50ac6db4d0bfbecbabfcd82ba70
-
SHA1
aae6766b68ac8e93b67a7785bce0212f505fccf3
-
SHA256
ce8767136c81283c8c4e708e3f674837ae06c90bf0c094c30a9de881e8fa6c4d
-
SHA512
653a5c1d8d466a9124885db0dc627c96dc66033cde929e279ae31c0e4766e8c7040803b36d709d1133aae1cb95d9b5533308bb3715b0edaaeabfdd4d94bab189
-
SSDEEP
12288:s0Tq97+zTsbWUqfJyVoJ3OIarDQxhuo+S81VW0YaBfNweKuhwhjit0P+AYU+:tqqobWUQ+ohArDQxhIrTOuGhOt6tJ
Malware Config
Signatures
Files
-
ce8767136c81283c8c4e708e3f674837ae06c90bf0c094c30a9de881e8fa6c4d.exe windows x86
824e6654a13d52651cfc7cd1ed4f7f71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetModuleHandleA
SetLastError
SetCommBreak
HeapFree
CloseHandle
GetVersionExA
GetCurrentThread
GetFileAttributesW
GetStringTypeA
GlobalLock
VirtualProtectEx
GetPrivateProfileIntA
CreateDirectoryW
RemoveDirectoryW
FindClose
GetCurrentProcess
GetPrivateProfileSectionA
CreateEventA
GetFileAttributesW
LocalFlags
user32
wsprintfW
IsDialogMessageA
GetWindowTextW
DispatchMessageA
LoadCursorW
SetFocus
IsZoomed
IsWindow
GetWindowLongW
InsertMenuA
PeekMessageW
SetCursorPos
PostMessageW
netshell
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
HrCreateDesktopIcon
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ