Static task
static1
Behavioral task
behavioral1
Sample
cef2585d4b5c8ac3a4e9393bd77fd6d21cab116759f6cdd627d4ef278c87acc4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cef2585d4b5c8ac3a4e9393bd77fd6d21cab116759f6cdd627d4ef278c87acc4.exe
Resource
win10v2004-20220812-en
General
-
Target
cef2585d4b5c8ac3a4e9393bd77fd6d21cab116759f6cdd627d4ef278c87acc4
-
Size
73KB
-
MD5
dfb4428b1562814d8d76574489c164ad
-
SHA1
b3ae62909470d4a00b46bca55e17d84efffe476c
-
SHA256
cef2585d4b5c8ac3a4e9393bd77fd6d21cab116759f6cdd627d4ef278c87acc4
-
SHA512
f0678c1b257697061aca846c9f8f008f8e4ad90439db29e25bace7b13741abe34732bc32237ab5b45fbddbf4652dbdd09679eb72b66c28cf0ee7d9ab9c5a634c
-
SSDEEP
1536:6o4MEPHf1RJVP16nysMbgiIUW7v8pHg+0EEO21SDDjEA09blZJioIbftonrNRvQN:65TwSx2dNNvhhXtoYwUhUF
Malware Config
Signatures
Files
-
cef2585d4b5c8ac3a4e9393bd77fd6d21cab116759f6cdd627d4ef278c87acc4.exe windows x86
b46d16459a83ee8394f497262c7f0b3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindCloseChangeNotification
FindNextChangeNotification
GetConsoleMode
HeapSummary
SetEnvironmentVariableA
FindFirstChangeNotificationW
CreateDirectoryA
GetComPlusPackageInstallStatus
SearchPathW
CheckNameLegalDOS8Dot3W
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 58KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE