Static task
static1
Behavioral task
behavioral1
Sample
cbfff0109a24f1a1da7dba7234a1b35b3e15eeff3f20171c76678fb366a5a908.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbfff0109a24f1a1da7dba7234a1b35b3e15eeff3f20171c76678fb366a5a908.exe
Resource
win10v2004-20221111-en
General
-
Target
cbfff0109a24f1a1da7dba7234a1b35b3e15eeff3f20171c76678fb366a5a908
-
Size
810KB
-
MD5
3ff934feca25d6ebbe7afbc131d41190
-
SHA1
e4ce14081e7215334b81e72a4ac58793d2e9a3fd
-
SHA256
cbfff0109a24f1a1da7dba7234a1b35b3e15eeff3f20171c76678fb366a5a908
-
SHA512
94ad532393dc3f493b361d23de1e46c285494621b138ea34c7fad16a558ece96f03a591edf04544d51a64027020630a35908ce85ed9f9dce23a43c24899d24ef
-
SSDEEP
12288:644qsioz/noH01k25SQ+KSpMzfqFKnXbtRkFy6k5vHRqJQeqmaYoUbm80kxdoH81:BfsiixLSDFKXbt2C5PRqWmd0ksH8lT
Malware Config
Signatures
Files
-
cbfff0109a24f1a1da7dba7234a1b35b3e15eeff3f20171c76678fb366a5a908.exe windows x86
068e5f9590b5c21783de94bb2cfa38c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecd0 Size: - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecd1 Size: 808KB - Virtual size: 807KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ