Static task
static1
Behavioral task
behavioral1
Sample
cde377a7f7afd3fd6b2ca45eaad51159662f7b1ba69f6ffbf436f6d90bf0bb1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cde377a7f7afd3fd6b2ca45eaad51159662f7b1ba69f6ffbf436f6d90bf0bb1e.exe
Resource
win10v2004-20220901-en
General
-
Target
cde377a7f7afd3fd6b2ca45eaad51159662f7b1ba69f6ffbf436f6d90bf0bb1e
-
Size
61KB
-
MD5
6bf881163645d596378199030ed6bf60
-
SHA1
a4062c2042ebe34619e9603cd73c550b9eb8a296
-
SHA256
cde377a7f7afd3fd6b2ca45eaad51159662f7b1ba69f6ffbf436f6d90bf0bb1e
-
SHA512
a6cb19315719654e7a82707c6db450b2d78483160b9a9adae52858b2e5ce77c35dac0401463de3218925608604cef5e1999f76657cf6a8d5b413e1bb36aa93af
-
SSDEEP
1536:AXGyU5rdLvSDzxAMDJZzGMvqNDk1pPZ2SKZ:qk5lv4AkrhCNQ1X
Malware Config
Signatures
Files
-
cde377a7f7afd3fd6b2ca45eaad51159662f7b1ba69f6ffbf436f6d90bf0bb1e.exe windows x86
e1606f1520040675c179a1b0857e42b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetFileTime
GlobalSize
GetConsoleTitleW
GetStartupInfoA
GlobalFlags
GetExitCodeProcess
DeviceIoControl
CloseHandle
FindClose
GetModuleHandleA
GetModuleFileNameW
CloseHandle
Sleep
lstrlenA
HeapCreate
GetCommandLineA
GetDriveTypeW
DeleteFileA
WriteFile
user32
PeekMessageA
FillRect
DestroyWindow
DispatchMessageA
SetFocus
CallWindowProcW
GetParent
GetWindowLongW
LoadImageA
BeginPaint
DrawTextW
IsZoomed
DispatchMessageA
hhsetup
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
wininet
FtpCommandA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pvtxcwg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE