Static task
static1
Behavioral task
behavioral1
Sample
cf514f42f5bf55b808ad4829127ff6d11d07e79d75281d09a1fc35dd8c7b3fb5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf514f42f5bf55b808ad4829127ff6d11d07e79d75281d09a1fc35dd8c7b3fb5.exe
Resource
win10v2004-20221111-en
General
-
Target
cf514f42f5bf55b808ad4829127ff6d11d07e79d75281d09a1fc35dd8c7b3fb5
-
Size
76KB
-
MD5
747883fc3378e0aa467c4032bd52b213
-
SHA1
8817d5a06768b7cc6f8baac99e1070e0a897ddd6
-
SHA256
cf514f42f5bf55b808ad4829127ff6d11d07e79d75281d09a1fc35dd8c7b3fb5
-
SHA512
ee799108a9c6db7791c422b30d4636c83c736b63491ae78f7ae7aedbee28d214e5f17c6f819a8120786143cfa78e18e240c89d397580261d3c35b789ca3a2be7
-
SSDEEP
1536:Ggi2u8ycmMatFRpCK1ergR/CcMYmd7B6pjVrs2ryrd1vUQuq6:GgiLHcmdtQKgcCcMYAd6Hs2qo
Malware Config
Signatures
Files
-
cf514f42f5bf55b808ad4829127ff6d11d07e79d75281d09a1fc35dd8c7b3fb5.exe windows x86
fbe557f072cbaed72a68dcaef19a493b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TrimVirtualBuffer
GetFileAttributesExA
lstrlen
GetStdHandle
Process32FirstW
CreateTimerQueue
WaitForDebugEvent
WriteConsoleInputVDMW
DosPathToSessionPathA
GetVolumeInformationW
SetFileAttributesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE