Static task
static1
Behavioral task
behavioral1
Sample
cd8b89bfdf92e801cf0a6e17abd6691c50a0c063b0ec5dd8cdebbe4f5f6cf56d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd8b89bfdf92e801cf0a6e17abd6691c50a0c063b0ec5dd8cdebbe4f5f6cf56d.exe
Resource
win10v2004-20220812-en
General
-
Target
cd8b89bfdf92e801cf0a6e17abd6691c50a0c063b0ec5dd8cdebbe4f5f6cf56d
-
Size
305KB
-
MD5
6ee04b9017595d118b072b46b15a71d0
-
SHA1
8519f60b1984e1c06f802539e5394e880814bf25
-
SHA256
cd8b89bfdf92e801cf0a6e17abd6691c50a0c063b0ec5dd8cdebbe4f5f6cf56d
-
SHA512
fca6a00f348f7c6075ec525fd7173d227097afb47ad08f0070990a02435fb6cca85fd916bf532bad928e6923f9ce1fe45830eb3fcaa10ce563b60124e3a2b45f
-
SSDEEP
6144:4RcQVIXxSusNTQ1js5rHJzppkgWqav8VBVBJ3NsO:46QeBSusNTQ1AZP1UvmBVBJX
Malware Config
Signatures
Files
-
cd8b89bfdf92e801cf0a6e17abd6691c50a0c063b0ec5dd8cdebbe4f5f6cf56d.exe windows x86
d5f5ddcf8f222525f893eb72d9fdd49f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
HeapCreate
GetPrivateProfileStringA
GetDriveTypeA
IsBadStringPtrW
ReleaseMutex
WriteFile
FindClose
GetCurrentThreadId
GetCurrentProcessId
ReleaseMutex
TlsGetValue
InitializeCriticalSection
CreateEventW
GlobalFlags
FindAtomA
GetEnvironmentVariableW
GetFileTime
lstrlenW
LocalFree
user32
DispatchMessageA
SetFocus
EndDialog
CallWindowProcW
CreateWindowExA
GetSysColor
DrawStateW
GetClientRect
IsWindow
GetSysColor
DrawTextA
GetKeyboardType
GetClassInfoA
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ