Static task
static1
Behavioral task
behavioral1
Sample
cfe857132a733ff73fecb26eb86781b49f244041e79e54911713088be71d847d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cfe857132a733ff73fecb26eb86781b49f244041e79e54911713088be71d847d.exe
Resource
win10v2004-20220812-en
General
-
Target
cfe857132a733ff73fecb26eb86781b49f244041e79e54911713088be71d847d
-
Size
45KB
-
MD5
cdb87fbec2a352e141a7c7c18f7532b3
-
SHA1
998661ac7671148ce4e431dab2fd848cb1770a33
-
SHA256
cfe857132a733ff73fecb26eb86781b49f244041e79e54911713088be71d847d
-
SHA512
73013317ac3bc06dc5b4bc95c2574c9e1345de8bd6f87f7d1efeea460320787a90cbd27098ec7bf7397edeb12ef87744c2d1fb08fee51089f1fdd1a1384968ee
-
SSDEEP
768:xwRte/c+JTvpetV1rJ0hy8bSJDOSSWfC4hcwHsX8P/ik02zir0Iecsz:xGWZJTWV1rJ0hy8bSAS59mwDP6kVJIHi
Malware Config
Signatures
Files
-
cfe857132a733ff73fecb26eb86781b49f244041e79e54911713088be71d847d.exe windows x86
66c59c986f62c16905b27298ee89d6d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FindResourceA
lstrlenA
FreeLibrary
LoadResource
WriteFile
GlobalAlloc
SizeofResource
lstrcatA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
WinExec
CloseHandle
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ