Static task
static1
Behavioral task
behavioral1
Sample
cd6fd1e19ba58c9a3ae9c7d6e97842b93522490e60a41b24b0f6af556e517ff3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd6fd1e19ba58c9a3ae9c7d6e97842b93522490e60a41b24b0f6af556e517ff3.exe
Resource
win10v2004-20220901-en
General
-
Target
cd6fd1e19ba58c9a3ae9c7d6e97842b93522490e60a41b24b0f6af556e517ff3
-
Size
234KB
-
MD5
72393660ade470c38a931db0c2a65dc0
-
SHA1
26216cfef8329a01c557bd4e85ffe9e010587694
-
SHA256
cd6fd1e19ba58c9a3ae9c7d6e97842b93522490e60a41b24b0f6af556e517ff3
-
SHA512
bf895f348917851f2ff2ef7d93bc5038cb4cb7690ebc0ded94b549db95e86219d7f30ec7283929b288c6dc0740ea270ae1092ff6843f3dcb4be33551c5e0e0ff
-
SSDEEP
3072:ZFkr8wxakDOSS3XLBINQ6QIGW5yRXX5pSJG5x2oW1tf5luDGDmAr5:vkr8wQnScLBv6FdoBsfawf
Malware Config
Signatures
Files
-
cd6fd1e19ba58c9a3ae9c7d6e97842b93522490e60a41b24b0f6af556e517ff3.exe windows x86
513465f76a9ec42be76b6578525d3717
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumaAvailableMemoryNode
DeleteTimerQueueTimer
GetVersion
GetProcAddress
GetModuleHandleA
LocalAlloc
SetEnvironmentVariableA
CompareStringW
GetSystemTimeAsFileTime
HeapAlloc
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetFileType
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
CreateFileA
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CreateDirectoryA
user32
SetClassLongA
OpenClipboard
ScrollWindowEx
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE