Static task
static1
Behavioral task
behavioral1
Sample
ce7bf9766da3bae17bf930dca057cb7fc49b0e85eaa18371bbfa05f5f5b80089.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce7bf9766da3bae17bf930dca057cb7fc49b0e85eaa18371bbfa05f5f5b80089.exe
Resource
win10v2004-20220812-en
General
-
Target
ce7bf9766da3bae17bf930dca057cb7fc49b0e85eaa18371bbfa05f5f5b80089
-
Size
180KB
-
MD5
75abbabe00199be02dc41c85d93b7930
-
SHA1
5cb44ec52f68b22a0f3ed38812180bb0245475d5
-
SHA256
ce7bf9766da3bae17bf930dca057cb7fc49b0e85eaa18371bbfa05f5f5b80089
-
SHA512
41a1a506d022d654a7605b23f17d653979f599a9b7a1a9f483893d110d82518057c7c64f3643c9cb21ee4cebef5ea55c74d03b8e19245c88a57094ea35506e7c
-
SSDEEP
3072:SlmMTB3WoIfGf4Lw7wsWFUP02OOa6DQXtsCwoS4Chq+4IxJcfgEvgQPxqEfoABj1:SEMZmU4Lw7fWFUcVE8sn4CBR2gHQZqEF
Malware Config
Signatures
Files
-
ce7bf9766da3bae17bf930dca057cb7fc49b0e85eaa18371bbfa05f5f5b80089.exe windows x86
706009dafc42a9e06cb819ba8da8dc92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
GetFileAttributesA
GetPrivateProfileIntA
SetLocaleInfoW
FlushFileBuffers
BeginUpdateResourceW
SetFilePointer
GlobalGetAtomNameW
EnumCalendarInfoA
GetModuleHandleA
GetLocaleInfoA
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
SetStdHandle
ReadFile
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
CloseHandle
user32
CreateCursor
DdeConnectList
SetFocus
GetFocus
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 145KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ