Static task
static1
Behavioral task
behavioral1
Sample
cf49174cdf1d0d8bd2246e6fe3b85426554a5b0facdb04e460d8c78e6eb9aa59.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf49174cdf1d0d8bd2246e6fe3b85426554a5b0facdb04e460d8c78e6eb9aa59.exe
Resource
win10v2004-20220812-en
General
-
Target
cf49174cdf1d0d8bd2246e6fe3b85426554a5b0facdb04e460d8c78e6eb9aa59
-
Size
166KB
-
MD5
964ef9ff7ff06b23f18bd0b2c2c8774d
-
SHA1
217ef735e4fff00b571854fbd742bf43b38c823e
-
SHA256
cf49174cdf1d0d8bd2246e6fe3b85426554a5b0facdb04e460d8c78e6eb9aa59
-
SHA512
9b15cc66294c0073a0bc34c959d68cec7070f6e8212970eed5e5d1144b4164d2a10194d859f6dbcb36f4ceab0ac1520e47084eeda19b64aa69bc67365a6de30f
-
SSDEEP
3072:IHHIo1PWWpYZX6YyXV2hSHHgujgYj+aWuoFf/psLNQns+DQB5V2M:II6uW6AZXV2h8Hg+gvruCnps7J
Malware Config
Signatures
Files
-
cf49174cdf1d0d8bd2246e6fe3b85426554a5b0facdb04e460d8c78e6eb9aa59.exe windows x86
b32844831978dc13c154c35504f0f1a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ws2_32
connect
wininet
InternetOpenUrlA
mpr
WNetAddConnection2A
oleaut32
GetErrorInfo
Sections
.text Size: 150KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE