Static task
static1
Behavioral task
behavioral1
Sample
cdbc750054e5aa93989d3d9043fdc0178cd6e643465bbd7995af9fb5f12f717a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cdbc750054e5aa93989d3d9043fdc0178cd6e643465bbd7995af9fb5f12f717a.exe
Resource
win10v2004-20220812-en
General
-
Target
cdbc750054e5aa93989d3d9043fdc0178cd6e643465bbd7995af9fb5f12f717a
-
Size
85KB
-
MD5
71733b1f42a16a6cecafdd5e002f8ea0
-
SHA1
55e794cfae191e2bb6687b02a218564983389e55
-
SHA256
cdbc750054e5aa93989d3d9043fdc0178cd6e643465bbd7995af9fb5f12f717a
-
SHA512
0be52c9294594f582b3f4ee59541178708be73e006ed183ec0f6179cf83eca03ec3704245c0228441d0b7fb57d6c53f1e77b0cd830634bcbd27fd7bc2e91798c
-
SSDEEP
1536:kJsLtyN1kQW+EckQhztpvHquiMyAKREwCGgayEK26LJzpcQU42:kJYtS1kQZEckQ3v8rgayPLZD1
Malware Config
Signatures
Files
-
cdbc750054e5aa93989d3d9043fdc0178cd6e643465bbd7995af9fb5f12f717a.exe windows x86
58d061097d69bd5b3bf2b004c681a7cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceW
LocalLock
GetLocaleInfoW
CreateDirectoryW
IsValidCodePage
TlsGetValue
SetLastError
VirtualProtect
GetCurrentProcess
MapViewOfFile
GetFileAttributesA
GetModuleHandleA
GetStringTypeA
FindClose
GetDriveTypeW
IsBadWritePtr
GetExitCodeThread
HeapFree
GetFileAttributesA
RemoveDirectoryW
GetTickCount
user32
IsDialogMessageA
DispatchMessageA
LoadImageW
SetCursor
GetWindowLongW
SetFocus
wsprintfW
PostMessageW
GetWindowTextW
PeekMessageW
IsWindow
LoadStringW
LoadCursorA
msctf
DllUnregisterServer
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE