Static task
static1
Behavioral task
behavioral1
Sample
cf0356a0f1d42431387b4b17a63b54ae7f60ba71849fde70d8f0fec8f20bde0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf0356a0f1d42431387b4b17a63b54ae7f60ba71849fde70d8f0fec8f20bde0f.exe
Resource
win10v2004-20220812-en
General
-
Target
cf0356a0f1d42431387b4b17a63b54ae7f60ba71849fde70d8f0fec8f20bde0f
-
Size
205KB
-
MD5
51d8867c929fbd175464d60edc5d17b8
-
SHA1
2c8f65a72cdef53166c26989299513d2ef702302
-
SHA256
cf0356a0f1d42431387b4b17a63b54ae7f60ba71849fde70d8f0fec8f20bde0f
-
SHA512
e928a1f9ed70049099732c3bb713c1ce664092c66a9981c45a4a8069ef62367f98d98a9071a42c1461b55611651bd6095fc761417f44d66a69685139d05c29b2
-
SSDEEP
3072:G+X0x/NY/zmUkp6gji8r5odTnLXPO/ACgXdOCCnSqVd0uq7X:GbNY/z6pzu8riTTPdCgXdOBSqK
Malware Config
Signatures
Files
-
cf0356a0f1d42431387b4b17a63b54ae7f60ba71849fde70d8f0fec8f20bde0f.exe windows x86
c16820c6b6f04496f9d1a36cf153147c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
Sections
.text Size: 175KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE