Static task
static1
Behavioral task
behavioral1
Sample
cf08b17e788e104b01648168d1bff0cad3050051da668fe5d35594e51b185672.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf08b17e788e104b01648168d1bff0cad3050051da668fe5d35594e51b185672.exe
Resource
win10v2004-20221111-en
General
-
Target
cf08b17e788e104b01648168d1bff0cad3050051da668fe5d35594e51b185672
-
Size
192KB
-
MD5
9f6efb2f5e7dd5ecd44abc06652c4b56
-
SHA1
1dc77615145bcfe3546018b49bf88c7820da77ef
-
SHA256
cf08b17e788e104b01648168d1bff0cad3050051da668fe5d35594e51b185672
-
SHA512
29fdbf64c1288670de919a658302602688c3ea7c1f6032dc0093f1efab464286a095cf3465a218d0d643d28a1230327445806e7ca3dc7d29b981897c48f91378
-
SSDEEP
3072:eNFEiHWiILm2TRhlkb1zwLvnOQEIT/mV1QVO4Qa9kyCb4XiCtMQ99xxmH1JxmsZ2:vtTVhlkb1z7QE9V1YOpgCb4yyz9fmV5Y
Malware Config
Signatures
Files
-
cf08b17e788e104b01648168d1bff0cad3050051da668fe5d35594e51b185672.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE