Static task
static1
Behavioral task
behavioral1
Sample
cda9cc7f2f8b9329c9646b5ef3467ce0a9ed422ea5739046404cdcb2ad96047e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cda9cc7f2f8b9329c9646b5ef3467ce0a9ed422ea5739046404cdcb2ad96047e.exe
Resource
win10v2004-20220812-en
General
-
Target
cda9cc7f2f8b9329c9646b5ef3467ce0a9ed422ea5739046404cdcb2ad96047e
-
Size
578KB
-
MD5
676aafd93ffd53db617555a88d18c94d
-
SHA1
4a49435a72b9a1305f14bd42c6dcdea5a52e979a
-
SHA256
cda9cc7f2f8b9329c9646b5ef3467ce0a9ed422ea5739046404cdcb2ad96047e
-
SHA512
ba399130343504cd783cf15bd275411db5c158735ef3763fb8500b915db2e704596f12853e76a3b5049d3ce2d4d0f7faa28ec45b5580d88de4fb0edc45274947
-
SSDEEP
12288:SW5pXpc0k1hPKtmd1OkXiy1JAZEieJQq+Dbm4:SkNpirKOilEIHDbr
Malware Config
Signatures
Files
-
cda9cc7f2f8b9329c9646b5ef3467ce0a9ed422ea5739046404cdcb2ad96047e.exe windows x86
e8e6e86dc1a913c2f375627f25e68635
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
SetFocus
DialogBoxParamW
DestroyWindow
DefWindowProcW
SendMessageW
PostMessageW
BeginPaint
GetClientRect
DrawTextW
EndPaint
PostQuitMessage
CreateWindowExW
ShowWindow
UpdateWindow
LoadIconW
LoadCursorW
RegisterClassExW
LoadStringW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
MessageBoxW
SetWindowLongW
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
lstrcpyW
GetStartupInfoA
lstrlenW
GetCurrentDirectoryW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetModuleHandleA
FreeEnvironmentStringsA
shfolder
SHGetFolderPathA
shell32
SHGetDiskFreeSpaceA
FindExecutableA
SHGetMalloc
DragQueryPoint
DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellAboutA
SHFreeNameMappings
SHGetDataFromIDListA
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ