Static task
static1
Behavioral task
behavioral1
Sample
cdb81d1f05a9117dfd6c1c7ce7a70cf995e56ceb6fdb9a68eb8b6cfa83934b55.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cdb81d1f05a9117dfd6c1c7ce7a70cf995e56ceb6fdb9a68eb8b6cfa83934b55.exe
Resource
win10v2004-20221111-en
General
-
Target
cdb81d1f05a9117dfd6c1c7ce7a70cf995e56ceb6fdb9a68eb8b6cfa83934b55
-
Size
229KB
-
MD5
9bf3b18f932ff68548ef630600941e3a
-
SHA1
c8f8bc5855519f8a82392482e47d447509cc40cc
-
SHA256
cdb81d1f05a9117dfd6c1c7ce7a70cf995e56ceb6fdb9a68eb8b6cfa83934b55
-
SHA512
dd0635f0208064a0bf2e8fe8f073a121a93f123e3e17246fecfbc8662d970e7e8e3aea59e6963fd161978d8920124710ebfa39dfc710fb61934ea8bfdb3ca803
-
SSDEEP
6144:OATZT4VlDL/AgSOIXabE3oJeovXmsem9f3nbJIfi:OG4VdLcOetoXvXNem9b1
Malware Config
Signatures
Files
-
cdb81d1f05a9117dfd6c1c7ce7a70cf995e56ceb6fdb9a68eb8b6cfa83934b55.exe windows x86
dc07c8d77fa48f278b0b7e65613d1a29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
GetFileSize
SuspendThread
GetCurrentDirectoryA
WaitForSingleObject
ResetEvent
GetTickCount
SetLastError
FindClose
HeapCreate
ExitProcess
GetModuleHandleA
GetProfileIntW
Sleep
DeleteFileA
CreateFileA
GetTickCount
CloseHandle
ReleaseMutex
GetCalendarInfoA
InitializeCriticalSection
GetEnvironmentVariableA
GetStartupInfoW
HeapSize
HeapDestroy
user32
GetDC
DispatchMessageW
GetDC
DispatchMessageW
PeekMessageA
GetDC
GetSysColor
GetWindowLongA
MessageBoxA
CallWindowProcW
GetCursorPos
GetClassInfoA
GetDC
dmintf
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ