Static task
static1
Behavioral task
behavioral1
Sample
2cfcbeb5ae91e09566bdc8759372e1c573d93fefefb1dc0d5a65943268d027d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2cfcbeb5ae91e09566bdc8759372e1c573d93fefefb1dc0d5a65943268d027d9.exe
Resource
win10v2004-20220812-en
General
-
Target
2cfcbeb5ae91e09566bdc8759372e1c573d93fefefb1dc0d5a65943268d027d9
-
Size
572KB
-
MD5
633bd5f276c75457d8d69076e68ea2ba
-
SHA1
d32aeb188fc0afb60ed11cdc3094b6c3241e174e
-
SHA256
2cfcbeb5ae91e09566bdc8759372e1c573d93fefefb1dc0d5a65943268d027d9
-
SHA512
9aa3f6f328befe61985c991c7c9e55222b7ebf47f325e235bb4b8824951860ec59a10f95689d82e61651ad2a47d361fc67d1186876573277bb55063d5872f8bd
-
SSDEEP
12288:WBwb2a04AqQCyp5gzmMAWZmkGxNe+lr7UKO+HOd1Mxb:Wyb2k3y7gzcNBHXqiV
Malware Config
Signatures
Files
-
2cfcbeb5ae91e09566bdc8759372e1c573d93fefefb1dc0d5a65943268d027d9.exe windows x86
50a391d6ca4dba542b797ba223733c0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetVersion
GetModuleHandleA
GetTickCount
ExitProcess
GetCommandLineA
VirtualAlloc
LeaveCriticalSection
HeapCreate
CloseHandle
FormatMessageA
FindClose
LoadResource
InitializeCriticalSection
TerminateProcess
LocalFree
FindNextFileA
CreateFileMappingA
GetSystemTimeAsFileTime
GetConsoleCP
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetCPInfo
CompareStringA
SetStdHandle
GetProcessHeap
GetProcAddress
SetEvent
LoadLibraryExW
DeleteFileA
GetFileSize
GetStringTypeW
GetConsoleMode
GetEnvironmentStrings
GetCurrentProcess
LoadLibraryA
HeapAlloc
GetOEMCP
GetVersionExW
WaitForSingleObject
GlobalFree
lstrlenA
SetHandleCount
ReleaseMutex
EnterCriticalSection
HeapFree
user32
TrackPopupMenu
CreateWindowExA
GetWindowLongA
ScreenToClient
GetDlgItem
IsWindowVisible
TranslateMessage
SetWindowLongA
SetDlgItemTextA
GetWindowRect
ShowWindow
PostQuitMessage
EndDialog
Sections
.text Size: 539KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ