Static task
static1
Behavioral task
behavioral1
Sample
cd593584a2617e88540e5db13b894d7137bfd736bc57d92cd605233c5e5e9130.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd593584a2617e88540e5db13b894d7137bfd736bc57d92cd605233c5e5e9130.exe
Resource
win10v2004-20221111-en
General
-
Target
cd593584a2617e88540e5db13b894d7137bfd736bc57d92cd605233c5e5e9130
-
Size
405KB
-
MD5
b7849996219bef23509dca373023f37d
-
SHA1
5ee7626d19f7eff281d11dbe598fad1cbb84b88a
-
SHA256
cd593584a2617e88540e5db13b894d7137bfd736bc57d92cd605233c5e5e9130
-
SHA512
1695efc0ed1312262ad64f200c8a515969a756cd72157358c492a4bb65c2414dbcb6466d74c06bc84ca7270719a8fe7bf8cba74d56e4e692c9beed42341e2734
-
SSDEEP
12288:R7Lg6S2uYkyC5lmlHaFY8J9aPoifXgQIgBSNNysLJc:hytX4lLo2fJIYSNri
Malware Config
Signatures
Files
-
cd593584a2617e88540e5db13b894d7137bfd736bc57d92cd605233c5e5e9130.exe windows x86
0c888e133105308885f3999fbfc70287
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wsock32
__WSAFDIsSet
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetCancelConnection2W
wininet
InternetReadFile
psapi
EnumProcesses
userenv
CreateEnvironmentBlock
user32
SetWindowPos
gdi32
DeleteObject
comdlg32
GetSaveFileNameW
advapi32
RegEnumValueW
shell32
DragQueryPoint
ole32
OleSetMenuDescriptor
oleaut32
SafeArrayAllocData
Sections
.text Size: 253KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE