Static task
static1
Behavioral task
behavioral1
Sample
cefd3f592192732be07d77d49e140290a60892ad942aeb824349b02a350ae9c4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cefd3f592192732be07d77d49e140290a60892ad942aeb824349b02a350ae9c4.exe
Resource
win10v2004-20221111-en
General
-
Target
cefd3f592192732be07d77d49e140290a60892ad942aeb824349b02a350ae9c4
-
Size
45KB
-
MD5
7fffca4df6f8cbe795e12c55b44ecd31
-
SHA1
0ad99538082677729e3b146b4b56d7016110bd51
-
SHA256
cefd3f592192732be07d77d49e140290a60892ad942aeb824349b02a350ae9c4
-
SHA512
3e824af445fe159d93a76f3d11f0062f39d314cfc402a5f3a32582434dd5f56694d76e5f044458616bc8f113f899144968a6cd55d307b374838f71f6a1b54abe
-
SSDEEP
768:ndrgypXjSuY0cEKS+jfizzc1CTgCuNlCUSk760xglj1GXwYB6iUh6mmekWLs2cfI:nRgyNS0cEKBjfizXgtlC7k760uj1GAYU
Malware Config
Signatures
Files
-
cefd3f592192732be07d77d49e140290a60892ad942aeb824349b02a350ae9c4.exe windows x86
f0c51192786fef3344045e19c74cc60c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetVersion
GetWindowsDirectoryA
RtlUnwind
SetUnhandledExceptionFilter
TerminateThread
lstrlenA
user32
CharUpperBuffA
crtdll
_itoa
__GetMainArgs
exit
raise
signal
strchr
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 728B - Virtual size: 728B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE