Static task
static1
Behavioral task
behavioral1
Sample
cd1556fae96a3e5664312e3c41b213294f947170d63987075ce2cf39fe3483d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd1556fae96a3e5664312e3c41b213294f947170d63987075ce2cf39fe3483d6.exe
Resource
win10v2004-20220812-en
General
-
Target
cd1556fae96a3e5664312e3c41b213294f947170d63987075ce2cf39fe3483d6
-
Size
76KB
-
MD5
63c47477d60814b37717cb4a67045990
-
SHA1
d15ae49be5820333a7150421d54c29acbf123738
-
SHA256
cd1556fae96a3e5664312e3c41b213294f947170d63987075ce2cf39fe3483d6
-
SHA512
3c6d08bfd10d33bff87e5ec3a4378701072c99f74d09a522a952f867fc01cc09b46b0b466144665e47809f6f5ee872c71af2d1e6b695138b4f677391dc28522c
-
SSDEEP
1536:Yuyx0/uBJEpw0TMMzMymDZnWQAD8GXN+I7fJ+aCl1fe+:buvM3mDZnKzoI7h+aS1G+
Malware Config
Signatures
Files
-
cd1556fae96a3e5664312e3c41b213294f947170d63987075ce2cf39fe3483d6.exe windows x86
20c0a20fcc4e2a519751f357aa493502
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
FindNextFileA
FindFirstFileA
SetEnvironmentVariableA
GetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
CreateProcessA
CloseHandle
FindClose
GetStdHandle
GetFileType
WaitForSingleObject
GetLastError
GetExitCodeProcess
GetVersion
GetFileAttributesA
GetCurrentDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
FormatMessageA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetVersionExA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
HeapAlloc
HeapFree
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
GetLocaleInfoA
GetCPInfo
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
HeapSize
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
CreateFileA
LoadLibraryA
RtlUnwind
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEndOfFile
ReadFile
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE