Static task
static1
Behavioral task
behavioral1
Sample
c1bf1bd36b4237ef0103db8cf45b25cd4327882438b00eb5b53144f019f7bf9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1bf1bd36b4237ef0103db8cf45b25cd4327882438b00eb5b53144f019f7bf9f.exe
Resource
win10v2004-20221111-en
General
-
Target
c1bf1bd36b4237ef0103db8cf45b25cd4327882438b00eb5b53144f019f7bf9f
-
Size
119KB
-
MD5
4b991d43613092282d21ee43663e49be
-
SHA1
1758ecfc8119513c1b3eb28f07de2a53d76ae559
-
SHA256
c1bf1bd36b4237ef0103db8cf45b25cd4327882438b00eb5b53144f019f7bf9f
-
SHA512
a4bfd07fb75b8ac4a5e0768d579428c590633afba4bd864124262127148b6d90b49615ddc40ca399c5b2d4e67bcfab3869b8d027db23381f40bd304905bd420d
-
SSDEEP
1536:f+iH34KAkAHxT+PZSarjNvc5fhMjssLBWGpjVrs2ryrd1vUQuqSSqK5tnCvv:3+txS9/Nvc9hQTWGHs2qxnC
Malware Config
Signatures
Files
-
c1bf1bd36b4237ef0103db8cf45b25cd4327882438b00eb5b53144f019f7bf9f.exe windows x86
de96986bcf7e6c423f900780f9abd5c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
DecodePointer
ExpandEnvironmentStringsA
ReplaceFileW
EnumCalendarInfoW
RegisterWaitForSingleObject
WaitForSingleObjectEx
LZOpenFileA
GetTapeStatus
GetProcessTimes
CopyFileA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE