Static task
static1
Behavioral task
behavioral1
Sample
cfeb187a69137a9864774df5844ffe265315f951940915438d17ed1bab2f0b64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfeb187a69137a9864774df5844ffe265315f951940915438d17ed1bab2f0b64.exe
Resource
win10v2004-20220812-en
General
-
Target
cfeb187a69137a9864774df5844ffe265315f951940915438d17ed1bab2f0b64
-
Size
228KB
-
MD5
c4a909a3280a96682684f4024af11496
-
SHA1
6bef217f2066773db35c63d324f63614db40884c
-
SHA256
cfeb187a69137a9864774df5844ffe265315f951940915438d17ed1bab2f0b64
-
SHA512
b8aafc3c1e3309b090817360b95902adff660220f150f02daac3ef9e3085f78d78c8c50bd7a83b814f6b62337ac0121ef7baca35fd137466af5673b4dc819d4f
-
SSDEEP
3072:IjjjjjjjjjpvyDOh//9mlthYU7UfUxAUct5Ej7aAG:HDp6AUfIcAeA
Malware Config
Signatures
Files
-
cfeb187a69137a9864774df5844ffe265315f951940915438d17ed1bab2f0b64.exe windows x86
1792722e7a0d953f667fc991d6aa1892
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCPInfo
GetFileType
GetOEMCP
GetStringTypeA
GetStringTypeW
GetSystemInfo
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InterlockedExchange
CreateFileMappingA
LCMapStringA
LCMapStringW
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetUnhandledExceptionFilter
UnmapViewOfFile
VirtualFree
VirtualProtect
VirtualQuery
lstrcpynA
VirtualAlloc
GetCurrentProcess
GetStartupInfoW
GlobalAlloc
GetWindowsDirectoryA
CreateFileW
GetWindowsDirectoryW
IsDBCSLeadByteEx
lstrcatW
user32
ReleaseDC
LoadCursorA
LoadIconA
MessageBoxA
GetFocus
SetCaretPos
GetDC
CreateCaret
ShowCaret
DefWindowProcA
GetSystemMetrics
GetSysColor
gdi32
GetStockObject
GetTextMetricsA
SelectObject
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
msvcrt
memcpy
free
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ