Static task
static1
Behavioral task
behavioral1
Sample
cf175f18c52a5ec80d98f3890aedb38cc7d98cba9433c50c79b6bd628e649a7f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf175f18c52a5ec80d98f3890aedb38cc7d98cba9433c50c79b6bd628e649a7f.exe
Resource
win10v2004-20221111-en
General
-
Target
cf175f18c52a5ec80d98f3890aedb38cc7d98cba9433c50c79b6bd628e649a7f
-
Size
98KB
-
MD5
c57d425e738f3fddeb94c5de80feef76
-
SHA1
64225aa92a7a6afd217a5ae81fb04ffe338ef24e
-
SHA256
cf175f18c52a5ec80d98f3890aedb38cc7d98cba9433c50c79b6bd628e649a7f
-
SHA512
add240f3af69809e0e977726d64635feaa9316bdcd77c2a2136db2cc20617aeae29b26dd59c01584efa71c65a849ce5c547d393f54e0e1ec04d9fd984a03e715
-
SSDEEP
1536:Fv5MASDL6vr9s8hPBArSj74ckzblHY0kWloZLtnckP390q+3/k5159:FvkgS8h+r84pG06oq+M513
Malware Config
Signatures
Files
-
cf175f18c52a5ec80d98f3890aedb38cc7d98cba9433c50c79b6bd628e649a7f.exe windows x86
2aeac41ce28aa3a2bfcf3d3546fae181
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
TerminateProcess
GetLastError
lstrcmpiA
GetProcAddress
SetFileAttributesA
LoadLibraryA
Process32Next
GetSystemInfo
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
CreateProcessA
InterlockedDecrement
SetEvent
InitializeCriticalSection
RaiseException
GetModuleFileNameA
DeleteCriticalSection
GetCurrentThreadId
GetVersionExA
Sleep
OpenProcess
GetWindowsDirectoryA
Process32First
GetCurrentProcess
FreeLibrary
GetPrivateProfileStringA
GetPrivateProfileIntA
InterlockedIncrement
GetStartupInfoA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileAttributesA
CreateDirectoryA
DeleteFileA
GetCommandLineA
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
HeapSize
ExitProcess
MultiByteToWideChar
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
user32
wsprintfA
PostThreadMessageA
advapi32
CryptDestroyHash
CryptDecrypt
CheckTokenMembership
FreeSid
CryptCreateHash
CryptEncrypt
AllocateAndInitializeSid
CryptAcquireContextA
CryptReleaseContext
GetTokenInformation
CryptDeriveKey
OpenProcessToken
CryptHashData
shell32
ShellExecuteA
ShellExecuteExA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ