Static task
static1
Behavioral task
behavioral1
Sample
cfdf254056b19fc4a7e20997e4d8af82a65bc7c0bf4a0b05f77f64ab1e881626.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cfdf254056b19fc4a7e20997e4d8af82a65bc7c0bf4a0b05f77f64ab1e881626.exe
Resource
win10v2004-20221111-en
General
-
Target
cfdf254056b19fc4a7e20997e4d8af82a65bc7c0bf4a0b05f77f64ab1e881626
-
Size
305KB
-
MD5
f9b820bea389bffba47cf17c6339cd09
-
SHA1
4d77ab72fe540086b1b021a4dff9d05c75ac7569
-
SHA256
cfdf254056b19fc4a7e20997e4d8af82a65bc7c0bf4a0b05f77f64ab1e881626
-
SHA512
7ce4ecedf8fbd6280f53da76fb8922bf957cf88670fd9e959a78e054f25f5d627450ce63513bdda519b6b311c5b01a4264c2a8e71020ccfcacb24ef132c0d4f4
-
SSDEEP
6144:8g0xOJXwbaa7dP2dcE03/xuRdXIyC1Zgoadqf+ntQ/:/0iw9F2dcE03/gRdLa1adqOtQ
Malware Config
Signatures
Files
-
cfdf254056b19fc4a7e20997e4d8af82a65bc7c0bf4a0b05f77f64ab1e881626.exe windows x86
4082a32ef1f8cca6590db596a49bf647
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
CreateDirectoryW
CloseHandle
GlobalFree
Sleep
GetProcessHeap
VirtualProtectEx
LoadLibraryA
CreateMutexA
GetLocalTime
HeapSize
DeleteFileA
SetLastError
GetStartupInfoA
SetLastError
lstrlenA
GetFileAttributesW
GetTickCount
SetEvent
WriteConsoleA
CreateHardLinkA
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
w32topl
ToplEdgeFree
ToplEdgeDestroy
ToplEdgeInit
ToplEdgeCreate
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE