Static task
static1
Behavioral task
behavioral1
Sample
cd627bada80155c0917a6a68f8bd93ca725697eac4ab8d465d68e8dee40dda4c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd627bada80155c0917a6a68f8bd93ca725697eac4ab8d465d68e8dee40dda4c.exe
Resource
win10v2004-20221111-en
General
-
Target
cd627bada80155c0917a6a68f8bd93ca725697eac4ab8d465d68e8dee40dda4c
-
Size
42KB
-
MD5
a04e72c82935ea6c047774aa5554280e
-
SHA1
2b4c5c84ccb6bd99d249242a71c7069b0fcf22b0
-
SHA256
cd627bada80155c0917a6a68f8bd93ca725697eac4ab8d465d68e8dee40dda4c
-
SHA512
93c35eac6e85e4f6bd286497dac768163206155e33c88260707caecab8acf4070feef873472faa27e75adcadc42f2fa8b0a582488426289331ba545507eda237
-
SSDEEP
768:2FjT8icA75E3LoSKx8/qFqnMQmnl4rtkJ8JnXYx2ha5v:cjgit5koSW8/dVEKrtZnXZE
Malware Config
Signatures
Files
-
cd627bada80155c0917a6a68f8bd93ca725697eac4ab8d465d68e8dee40dda4c.exe windows x86
96b506fc2057afc88db1baf906f81b3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcrt
free
??2@YAPAXI@Z
wcscmp
__CxxFrameHandler
kernel32
GetTempPathA
GetModuleFileNameA
Sleep
FindResourceA
LockResource
SizeofResource
GetWindowsDirectoryA
CreateFileA
WriteFile
GetProcAddress
LoadLibraryA
TerminateProcess
OpenProcess
GetSystemTime
ExitProcess
SetFileAttributesA
CloseHandle
user32
wsprintfA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ