Static task
static1
Behavioral task
behavioral1
Sample
cfc903a4ab0617efd847223dda4f969ee38ef3161a7042884d58733ef34a56f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfc903a4ab0617efd847223dda4f969ee38ef3161a7042884d58733ef34a56f7.exe
Resource
win10v2004-20220812-en
General
-
Target
cfc903a4ab0617efd847223dda4f969ee38ef3161a7042884d58733ef34a56f7
-
Size
52KB
-
MD5
609a83b9019f6324430f1f16fb4093db
-
SHA1
4803b9362915aad068bc26074a6e8549261fd69e
-
SHA256
cfc903a4ab0617efd847223dda4f969ee38ef3161a7042884d58733ef34a56f7
-
SHA512
9ceb1088ab9ce46f549fb36d8e39323d65c19eec564e8f3bb9d692d07f1bdb4ab2a44d90e6284db4a9a8bf173155f0deabfb4904ad090aff4bf386667332b370
-
SSDEEP
768:NdYk7iwK5hD8y45jecKNAF1CiSroPrPAuMc2qU0pbc/0Z+oZUCsVHRfA9EI3XF4b:PDTK5l7q9K0CoLxgqJl9Z+oi1xfA9cdt
Malware Config
Signatures
Files
-
cfc903a4ab0617efd847223dda4f969ee38ef3161a7042884d58733ef34a56f7.exe windows x86
246667c7894354b09bdd4b0924ff921a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
MessageBoxA
crtdll
_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strtol
wcslen
wctomb
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 668B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 760B - Virtual size: 760B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE