Static task
static1
Behavioral task
behavioral1
Sample
cbdce7a8a22e60b7747560e95f6002754e23a0438f3e74831708bad7270824ed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cbdce7a8a22e60b7747560e95f6002754e23a0438f3e74831708bad7270824ed.exe
Resource
win10v2004-20220812-en
General
-
Target
cbdce7a8a22e60b7747560e95f6002754e23a0438f3e74831708bad7270824ed
-
Size
61KB
-
MD5
fac473ae6e1534f7ab8f1b02bbacd098
-
SHA1
0e258cf8e498143598e5dbec1785a49b024102c5
-
SHA256
cbdce7a8a22e60b7747560e95f6002754e23a0438f3e74831708bad7270824ed
-
SHA512
585a6c252f22a9f84917950a6398af143907c6164cb9b1369124469082a02c605f5201ed02dff463e097717127c69a491d695e22d8526f6ac1c30f9beaf21e75
-
SSDEEP
768:pX5FTnzmnKrlK5rdLvS5tk1KzxBOMYCzKFOx1fbWmRkiqT498cm:pXvZU5rdLvSDzxAMOa9P9G
Malware Config
Signatures
Files
-
cbdce7a8a22e60b7747560e95f6002754e23a0438f3e74831708bad7270824ed.exe windows x86
a2664d7b4222cdc92ffa02f912fd462f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
GetFileTime
WriteFile
DeleteFileA
CloseHandle
CloseHandle
lstrlenA
FindClose
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameW
DeviceIoControl
Sleep
HeapCreate
GetDriveTypeW
GlobalSize
GetCommandLineA
GetTickCount
GetConsoleTitleW
GlobalFlags
user32
GetParent
SetFocus
DispatchMessageA
CallWindowProcW
DrawTextW
IsZoomed
BeginPaint
FillRect
DestroyWindow
DispatchMessageA
LoadImageA
GetWindowLongW
PeekMessageA
hhsetup
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
wininet
FtpCommandA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hykqhtg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE