Static task
static1
Behavioral task
behavioral1
Sample
cf37675c0896d83e33be0ae50d31f37bf7dba089596f6332f7522ab1f3eae3e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf37675c0896d83e33be0ae50d31f37bf7dba089596f6332f7522ab1f3eae3e6.exe
Resource
win10v2004-20221111-en
General
-
Target
cf37675c0896d83e33be0ae50d31f37bf7dba089596f6332f7522ab1f3eae3e6
-
Size
82KB
-
MD5
54cd9dc6b32cc97eca98b010e427c00b
-
SHA1
aceab27311bf457b6b923c41a50c228215f0bb21
-
SHA256
cf37675c0896d83e33be0ae50d31f37bf7dba089596f6332f7522ab1f3eae3e6
-
SHA512
b4d36c796d71764f5212858c0fff92a76b36035c6d079dab62f24877b57746a2a6a6a485cd87e981e282a2d8c701f13e115b1f5a63f112d1eb9bbd3d84c12c0d
-
SSDEEP
1536:Xd8XA7fzqULshi5qJubQbWjjp+Cn6NMbiVq1CV:N8XA7Lqk5qJubEi9+Cn6N/Vq1CV
Malware Config
Signatures
Files
-
cf37675c0896d83e33be0ae50d31f37bf7dba089596f6332f7522ab1f3eae3e6.exe windows x86
4f1db7e33ddc9ece53cb3fee26139b4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetModuleFileNameA
lstrlenA
HeapDestroy
GetCommandLineW
GetACP
CreateFileMappingA
GetFileAttributesW
GetEnvironmentVariableA
IsBadCodePtr
TlsAlloc
HeapCreate
ResetEvent
TlsGetValue
GetStartupInfoA
GetStdHandle
GetModuleHandleA
ReleaseMutex
SetEvent
SetLastError
user32
DispatchMessageA
GetWindowLongA
IsWindow
PeekMessageA
CallWindowProcW
GetClassInfoA
GetSysColor
CreateIcon
FindWindowA
DestroyMenu
DispatchMessageA
DrawTextW
IsZoomed
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE