Static task
static1
Behavioral task
behavioral1
Sample
cf995a61c5ac088ad32021d30fc26d4a60c6aa4219e68f8da27d19ec7d96ecbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf995a61c5ac088ad32021d30fc26d4a60c6aa4219e68f8da27d19ec7d96ecbf.exe
Resource
win10v2004-20220812-en
General
-
Target
cf995a61c5ac088ad32021d30fc26d4a60c6aa4219e68f8da27d19ec7d96ecbf
-
Size
696KB
-
MD5
0875c01b82af8cf29afbea66002d19d0
-
SHA1
e55e09e21bcc8ef94afadf94a4a02e9ae50b1698
-
SHA256
cf995a61c5ac088ad32021d30fc26d4a60c6aa4219e68f8da27d19ec7d96ecbf
-
SHA512
2ceb4dbd1ec05a5dd2ebac0ddd5e11407f7d9eefa23666bb26fdeb78c66453c7c7ea20c5a4d8bdc76fee06d4c64406b0fa3b846d27b23900ad2ec5b6d9b62ecc
-
SSDEEP
12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Malware Config
Signatures
Files
-
cf995a61c5ac088ad32021d30fc26d4a60c6aa4219e68f8da27d19ec7d96ecbf.exe windows x86
b36eb9a4c6fca2002f3fab21d6da4be8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
htonl
wtsapi32
WTSRegisterSessionNotification
Sections
.MPRESS1 Size: 438KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE