Static task
static1
Behavioral task
behavioral1
Sample
cfV7.4/038TV2y656ykH.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfV7.4/038TV2y656ykH.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ʹ.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
ʹ.url
Resource
win10v2004-20220812-en
General
-
Target
bbecadefb51e8b25ca671e1b1c0bd87d6ed11756c4246a10e519c3d02755fb68
-
Size
17.4MB
-
MD5
246f01d8723ee3620369f216073fc564
-
SHA1
e1d2f0896d43a7ab52de3629732d83fb71b7807c
-
SHA256
bbecadefb51e8b25ca671e1b1c0bd87d6ed11756c4246a10e519c3d02755fb68
-
SHA512
4f2b1724f7fe9856e66127590cb746323a8fb757bf0f061065970f0cab9575ccf9f33d76f0d4176bd8c06132a018e3d437587de6f57aab59458dff4857d4a4d5
-
SSDEEP
393216:7jPW5hTRmaPk66fSkLk8f5qVQeZT2KZPduc:+IopkLdG2KZ/
Malware Config
Signatures
Files
-
bbecadefb51e8b25ca671e1b1c0bd87d6ed11756c4246a10e519c3d02755fb68.zip
-
cfV7.4/038TV2y656ykH.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 16.6MB - Virtual size: 18.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jgcaeygr Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
szxzeltq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ʹñؿ.txt
-
ʹ.url.url
-
˵.htm.html .js
-
ͼ.png.png