Static task
static1
Behavioral task
behavioral1
Sample
ceb214755dc8f8d2082044824b26f88e5225691da522c948be797bcba1e03713.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ceb214755dc8f8d2082044824b26f88e5225691da522c948be797bcba1e03713.exe
Resource
win10v2004-20220901-en
General
-
Target
ceb214755dc8f8d2082044824b26f88e5225691da522c948be797bcba1e03713
-
Size
27KB
-
MD5
bd6a52c77bc38f7b2fb0fe19c034cfc6
-
SHA1
c7fc4f0b8bc900a99fbe0a548b2afa82d008f613
-
SHA256
ceb214755dc8f8d2082044824b26f88e5225691da522c948be797bcba1e03713
-
SHA512
9dfa9e75f4975a716b8fa1d901a288edd4856b6abd43e019025c4a1db1cd2639fc7f09a76943ec794b1b8b4fe336b19570987ddae75f20661dc16bed1bd159c8
-
SSDEEP
384:tovJcNg9FYjeuqLMMAdhNRAqzQl9xVQJjMw3XTmUE/FaOMqK3:tohcSfF9A7Nyqu64wmUFh
Malware Config
Signatures
Files
-
ceb214755dc8f8d2082044824b26f88e5225691da522c948be797bcba1e03713.exe windows x86
7887748b33e43857eaa84deb43f415c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
IsDebuggerPresent
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetClientRect
GetMessageA
LoadIconA
MoveWindow
PostQuitMessage
RegisterClassExA
SetFocus
TranslateMessage
gdi32
DeleteObject
Sections
.flat Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kaegxi Size: 512B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mkxu Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.ccld Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ