Static task
static1
Behavioral task
behavioral1
Sample
cf6db540768ba3009981d2b09079bbfca8600fc73303846486177976b348671d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf6db540768ba3009981d2b09079bbfca8600fc73303846486177976b348671d.exe
Resource
win10v2004-20221111-en
General
-
Target
cf6db540768ba3009981d2b09079bbfca8600fc73303846486177976b348671d
-
Size
1.1MB
-
MD5
69f33f2fba84009829ad8f28847ddd8d
-
SHA1
c38bcbc4d8aab0f4ec770e96fed80bc550cdbc17
-
SHA256
cf6db540768ba3009981d2b09079bbfca8600fc73303846486177976b348671d
-
SHA512
9f29db70b0e1b351aa2c04856dbd900124dd3a49e91daace213246610be613c38d76e629e50488712bc9fe5d5cff37952c66a65a238008497e7ed374865019aa
-
SSDEEP
24576:IfECKhJdOGvA64KFPk8bJR9pBRgtduX3IlNVQ0Jhg:I8FhJtvp4KFcoJDprgyX3IlQ0Jhg
Malware Config
Signatures
Files
-
cf6db540768ba3009981d2b09079bbfca8600fc73303846486177976b348671d.exe windows x86
7fd3d478225c9721bd53895ad68f5fb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetTickCount
GetSystemDefaultLCID
GetVersion
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetSystemDefaultLangID
GetCommandLineA
GetCommandLineW
GetCurrentThread
HeapAlloc
GetProcessHeap
SetLastError
SetUnhandledExceptionFilter
CloseHandle
WideCharToMultiByte
WriteFile
QueryPerformanceCounter
InterlockedExchange
WaitForSingleObject
GetModuleHandleA
GetStringTypeA
CreateThread
CreateEventW
CreateFileW
InitializeCriticalSection
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ