Static task
static1
Behavioral task
behavioral1
Sample
cdf473c225782ae6e50efade725d1df4720aa77065a500ea2978adc1cdc194aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cdf473c225782ae6e50efade725d1df4720aa77065a500ea2978adc1cdc194aa.exe
Resource
win10v2004-20220812-en
General
-
Target
cdf473c225782ae6e50efade725d1df4720aa77065a500ea2978adc1cdc194aa
-
Size
165KB
-
MD5
70e4dd6f3cf77924781ce91f3c9d96ca
-
SHA1
130676c5dfb415afe0a8e6051e156ad330dbe3be
-
SHA256
cdf473c225782ae6e50efade725d1df4720aa77065a500ea2978adc1cdc194aa
-
SHA512
4c4be07750d3b4b1bd27c2d485f45070ba996ca83f4e00b34dd2188778f31e6843a27ff3df3448d990cc2a42f98418e47854cc2ab2b85e53008fa52ac56340a0
-
SSDEEP
3072:TqX89LE0pMNP1KNQfzEfLJq56wZLkY4sngXF9PKClT68G2ammFYkZm+hHue7D:TqyL8/kN44skOClT68dmW6TV7D
Malware Config
Signatures
Files
-
cdf473c225782ae6e50efade725d1df4720aa77065a500ea2978adc1cdc194aa.exe windows x86
ef70cbc339bf26b63caf4c70a5b9777f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
LoadLibraryExA
QueryPerformanceFrequency
CreateEventA
LoadLibraryW
ReadFile
CompareStringA
CompareStringW
GlobalSize
SizeofResource
FreeResource
SearchPathA
FindNextFileA
GetTempFileNameA
GetExitCodeProcess
TerminateProcess
OpenProcess
GetLocalTime
InitializeCriticalSection
GetCurrentProcessId
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
VirtualQuery
VirtualProtect
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
SetEndOfFile
RaiseException
rpcrt4
NdrClientCall
RpcBindingSetAuthInfoW
MesBufferHandleReset
ole32
CoReactivateObject
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ