Static task
static1
Behavioral task
behavioral1
Sample
cf38313518d007519926d1237b51cd8d55d3a080cf670229431b910874102f9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf38313518d007519926d1237b51cd8d55d3a080cf670229431b910874102f9d.exe
Resource
win10v2004-20220812-en
General
-
Target
cf38313518d007519926d1237b51cd8d55d3a080cf670229431b910874102f9d
-
Size
2.6MB
-
MD5
46ef929f9c015fa0e64e1aea13ac1e70
-
SHA1
5438ebd6c3d957e94ee1d30edbd719d222736ecd
-
SHA256
cf38313518d007519926d1237b51cd8d55d3a080cf670229431b910874102f9d
-
SHA512
18d6461373654a491e64c6cf2844f9e5a469253c7a1dd9bbb81d2cc8cd5081bd864aa46d47961e1fd8f6674541278c98f6287ca5d20c323ef944b2f1f53a5198
-
SSDEEP
49152:C6x1/LgoSDW/Bm7qErvtiFn5BnOAxyu9iVJUtbPoU85/SU08XbcePZ9H:C6x1/LgocyBm71rv4FTx2fxAUdzx9H
Malware Config
Signatures
Files
-
cf38313518d007519926d1237b51cd8d55d3a080cf670229431b910874102f9d.exe windows x86
371b4d956987cda3d73739640d8ea1dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegCloseKey
kernel32
CloseHandle
CreateFileA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
FlushInstructionCache
GetCurrentProcess
GetModuleFileNameA
VirtualFree
ole32
CoInitialize
CoUninitialize
oleaut32
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
MessageBoxA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE