Static task
static1
Behavioral task
behavioral1
Sample
cdffc9010acb89218b77da70e9fcb9682cd92076cf0d2668bdf552e16d3c6d75.exe
Resource
win7-20220812-en
General
-
Target
cdffc9010acb89218b77da70e9fcb9682cd92076cf0d2668bdf552e16d3c6d75
-
Size
268KB
-
MD5
0874e44f8361fd57490090c2befa8e40
-
SHA1
0a06ad0867be3f4b472c76832bfa94dbbc09d463
-
SHA256
cdffc9010acb89218b77da70e9fcb9682cd92076cf0d2668bdf552e16d3c6d75
-
SHA512
7818699229278c1fb10888bd58e6b2a2d728da1d78311df726506ce3e16f3e1335c2a73c2b047ff618f9dd240e9fa9e738f829a86e29b4632159ac64f7119314
-
SSDEEP
3072:Ol998akusLLcP/hoW2WrbkNuYWA0bESfYH6kgAXFUlfJLlY5kGt62Z9OR/928ve/:wsuCOlNESfHk+2Z9nvYlHplG1WtbKCw/
Malware Config
Signatures
Files
-
cdffc9010acb89218b77da70e9fcb9682cd92076cf0d2668bdf552e16d3c6d75.exe windows x86
e96eb513799584662012f1dc78d11898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommError
GetWindowsDirectoryA
lstrcmpiA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetACP
GetModuleHandleA
IsValidCodePage
GetLocaleInfoA
FindClose
FindFirstFileA
GetModuleFileNameA
LockResource
LoadResource
FindResourceA
GetSystemInfo
GetCurrentProcess
MulDiv
lstrcmpA
SetStdHandle
SetFilePointer
LCMapStringW
LCMapStringA
IsBadCodePtr
GetTickCount
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetCPInfo
HeapFree
HeapSize
TerminateProcess
HeapAlloc
HeapReAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
ReadFile
WriteFile
CreateFileA
SetupComm
SetCommTimeouts
GetVersionExA
lstrcpynA
lstrcatA
FlushFileBuffers
ReleaseMutex
CloseHandle
WaitForSingleObject
OutputDebugStringA
Sleep
CreateMutexA
FreeLibrary
lstrlenA
lstrcpyA
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
GlobalUnlock
GlobalFree
IsBadReadPtr
user32
GetDlgItem
SetWindowLongA
SetWindowPos
UpdateWindow
GetWindowRect
CallWindowProcA
DefWindowProcA
DestroyWindow
UnregisterClassA
CharUpperA
GetClientRect
MoveWindow
GetDesktopWindow
SetWindowTextA
GetWindowLongA
ScreenToClient
SetCursor
LoadCursorA
LoadImageA
SetCapture
GetClassLongA
GetPropA
PostMessageA
ReleaseCapture
KillTimer
SetPropA
GetDoubleClickTime
SetTimer
RemovePropA
SendMessageA
GetSystemMetrics
InvalidateRect
DestroyCursor
SetForegroundWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
LoadStringA
PostQuitMessage
gdi32
StartPage
TextOutA
EndPage
StartDocA
EndDoc
SelectObject
GetTextMetricsA
GetDeviceCaps
DeleteDC
CreateFontIndirectA
DeleteObject
winspool.drv
EnumPrintersA
comdlg32
CommDlgExtendedError
PrintDlgA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegCloseKey
comctl32
ord17
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE