Static task
static1
Behavioral task
behavioral1
Sample
cdbc24858712bd7f12bd4e555e7324ad3e5cc2036b191b3a1ef6c21da0a82ec0.exe
Resource
win7-20220812-en
General
-
Target
cdbc24858712bd7f12bd4e555e7324ad3e5cc2036b191b3a1ef6c21da0a82ec0
-
Size
96KB
-
MD5
6cccfd22d1694ce0a4a65c89604d998e
-
SHA1
0f5725e9d9dd879460455d1ec85b197337da5e27
-
SHA256
cdbc24858712bd7f12bd4e555e7324ad3e5cc2036b191b3a1ef6c21da0a82ec0
-
SHA512
73e481883a88e8359ebe29c89fd4e404484fcec2c85a62b3b1fe96836cfe540884d98666f7b1bd1c8eb64f3753a8a8a2b0f5237358ff4631e1fcac31eb86463b
-
SSDEEP
1536:rt/iswNjDAf6lIvB3oWlsnBgCraxRCqVPceGn/t2VqJdnviB0aOki:J/izjDVlISWl4rmVPceGn/tGqJdnviif
Malware Config
Signatures
Files
-
cdbc24858712bd7f12bd4e555e7324ad3e5cc2036b191b3a1ef6c21da0a82ec0.exe windows x86
2d59a65335a3dedce90c388a6979946c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
HeapFree
FreeEnvironmentStringsW
LCMapStringA
GetCurrentDirectoryW
TlsSetValue
RtlUnwind
CompareStringW
EnterCriticalSection
HeapReAlloc
GetSystemTimeAsFileTime
HeapDestroy
HeapSize
WriteFile
GetOEMCP
GetTimeZoneInformation
TlsAlloc
GetStringTypeW
FormatMessageA
TerminateProcess
GetStartupInfoA
SetEnvironmentVariableA
SetHandleCount
TlsFree
InitializeCriticalSection
GetExitCodeProcess
FreeEnvironmentStringsA
HeapCreate
FlushFileBuffers
SetLastError
GetExitCodeThread
LCMapStringW
GetDriveTypeA
QueryPerformanceCounter
ReadFile
GetCommandLineA
GetEnvironmentStringsW
CreateFileA
GetLastError
GetProcAddress
MultiByteToWideChar
GetStringTypeA
GetEnvironmentStrings
ExitThread
FreeLibrary
GetFileType
QueryPerformanceFrequency
WideCharToMultiByte
ExitProcess
LocalFree
GetCurrentProcess
SetFilePointer
DeleteCriticalSection
UnhandledExceptionFilter
GetModuleHandleA
LeaveCriticalSection
FindNextFileA
GetLocaleInfoA
GetCPInfo
HeapAlloc
GetModuleFileNameA
GetCurrentThreadId
CompareStringA
GetCurrentDirectoryA
LoadLibraryA
CloseHandle
SetStdHandle
GetACP
WaitForSingleObject
GetStdHandle
GetConsoleTitleA
GetSystemInfo
GetVersionExA
SetEndOfFile
FindClose
FindFirstFileA
advapi32
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ