Static task
static1
Behavioral task
behavioral1
Sample
cf084e073b35baf369537217d7f99aeab0a8e5d463a97aab54710b2987d783a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf084e073b35baf369537217d7f99aeab0a8e5d463a97aab54710b2987d783a5.exe
Resource
win10v2004-20220901-en
General
-
Target
cf084e073b35baf369537217d7f99aeab0a8e5d463a97aab54710b2987d783a5
-
Size
522KB
-
MD5
73f0ee43991098128a5a608a06696460
-
SHA1
5bf7a312914ac9deef9bd64e209a761aa1f3becc
-
SHA256
cf084e073b35baf369537217d7f99aeab0a8e5d463a97aab54710b2987d783a5
-
SHA512
44243a524eac5a934d4f3304b72d56edbb5a00a791c257b74d6a2a23a7cd75eb2be09135fbd5ec6f5ed885d3e14fac055acd7dd8e09f634004f0714b49ee96b6
-
SSDEEP
12288:rFdrIsRSm37vS62d4vUXjezByaeDp3ne/jC1Ehz1s:/BS0KT4qezByaOf1Q1s
Malware Config
Signatures
Files
-
cf084e073b35baf369537217d7f99aeab0a8e5d463a97aab54710b2987d783a5.exe windows x86
37e56cd07121cd79e25c09c8e977debc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwCreateFile
user32
DragDetect
VkKeyScanExA
GetClipboardSequenceNumber
kernel32
GetCommandLineA
GetSystemDefaultLangID
Sections
.text Size: 515KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE