Static task
static1
Behavioral task
behavioral1
Sample
cd7f659aff4c416877a5c06dd68eb205749a66cabb84f37c0fd4648e7528feba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd7f659aff4c416877a5c06dd68eb205749a66cabb84f37c0fd4648e7528feba.exe
Resource
win10v2004-20220812-en
General
-
Target
cd7f659aff4c416877a5c06dd68eb205749a66cabb84f37c0fd4648e7528feba
-
Size
20KB
-
MD5
80657d24a43f1690f6a06232d8360dc0
-
SHA1
645e9e8c821bc79e0a08dc9bf58e32729f2b5a64
-
SHA256
cd7f659aff4c416877a5c06dd68eb205749a66cabb84f37c0fd4648e7528feba
-
SHA512
66ddd999576f0a5485966feb761628b815b5bddb5b76d4b40e2b168b45c8953578b44ab6cf4022a8b1f1948e689e222a61a5f35d5abea22d098d5cfbe4503e84
-
SSDEEP
192:99SN5DFs8ZHl+mVaWalh3f15aNMTcWdi6CkqLe9E:9W+OUmNo6MTJs6NE
Malware Config
Signatures
Files
-
cd7f659aff4c416877a5c06dd68eb205749a66cabb84f37c0fd4648e7528feba.exe windows x86
0ea4b23461ddbccedd48ce1f76036243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindClose
SetCurrentDirectoryA
FindFirstFileA
FreeConsole
FindNextFileA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
msvcp80
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
msvcr80
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_adjust_fdiv
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
??2@YAPAXI@Z
__setusermatherr
_amsg_exit
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
_unlock
__getmainargs
_configthreadlocale
memset
__CxxFrameHandler3
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ