Static task
static1
Behavioral task
behavioral1
Sample
cef274eb2f20d5cb80ba749de59d30b0c5d03972310ee0108984d5f99d2eca4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cef274eb2f20d5cb80ba749de59d30b0c5d03972310ee0108984d5f99d2eca4a.exe
Resource
win10v2004-20221111-en
General
-
Target
cef274eb2f20d5cb80ba749de59d30b0c5d03972310ee0108984d5f99d2eca4a
-
Size
83KB
-
MD5
5a62d7cb2c0433808ef636b8eb360ca3
-
SHA1
b31eb30191824397cfc478650992452184e2aab3
-
SHA256
cef274eb2f20d5cb80ba749de59d30b0c5d03972310ee0108984d5f99d2eca4a
-
SHA512
c8aac53ad4490aeda41427b9f354de82236256afbc2ebf4a2fa99eb378942965a60d5e1afd2f593f1c861c406f8e45de8cee9af20ccf9e96af1b45dc74910ccf
-
SSDEEP
1536:hhZW+qSZdxuSTMb8EjH3RnH8WrxiSVsIpjVrs2ryrd1vUQuq8:hnqSZdxuIMb8SX6W9HKIHs2q
Malware Config
Signatures
Files
-
cef274eb2f20d5cb80ba749de59d30b0c5d03972310ee0108984d5f99d2eca4a.exe windows x86
3308a7c28c85d7c1aefae509ecfb0c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedFlushSList
OpenThread
Thread32Next
DeleteTimerQueueEx
CreateHardLinkA
WriteProcessMemory
GetTimeFormatW
SetDllDirectoryA
GetModuleHandleW
GetCommMask
ReadConsoleOutputCharacterA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE