Static task
static1
Behavioral task
behavioral1
Sample
cdd8d9202f2a1608b11082e05f0ad62712d81967fe6133687dfc43f929c7c5af.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cdd8d9202f2a1608b11082e05f0ad62712d81967fe6133687dfc43f929c7c5af.exe
Resource
win10v2004-20221111-en
General
-
Target
cdd8d9202f2a1608b11082e05f0ad62712d81967fe6133687dfc43f929c7c5af
-
Size
157KB
-
MD5
ad42a0bc54264e19d3f84a21b6646a6c
-
SHA1
cdbb47d59c43f3e8557dcfbb4a940cba154bb2fe
-
SHA256
cdd8d9202f2a1608b11082e05f0ad62712d81967fe6133687dfc43f929c7c5af
-
SHA512
71c0551449ba2e84746292bb833f649feb788a4a5875bf82baf6840b94d5139be5892fb50f57bc2e77e1fbbc907207de00ce442de83abfb499fabb123d29e676
-
SSDEEP
3072:UMVCXAdQoQsQxt1POdxmngqVg2zd2ms6zX8w0hadu/6pbcl+SKQXJfOZC89WvfMo:UMVCXAFQsQxt1OrO6OgWX8w0hqu/ieTs
Malware Config
Signatures
Files
-
cdd8d9202f2a1608b11082e05f0ad62712d81967fe6133687dfc43f929c7c5af.exe windows x86
5fd5f6452da17a2a858ff1340f209f60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteW
SHOpenFolderAndSelectItems
user32
SetCursor
LoadCursorW
GetDlgItem
EnableWindow
CloseWindow
CheckDlgButton
IsDlgButtonChecked
shlwapi
PathFindFileNameW
kernel32
UnhandledExceptionFilter
WinExec
WaitForMultipleObjects
VirtualFree
VirtualAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetThreadPriority
ResumeThread
QueryPerformanceFrequency
QueryPerformanceCounter
CloseHandle
CreateFileA
CreateThread
DeviceIoControl
DisableThreadLibraryCalls
ExitProcess
ExitThread
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InterlockedDecrement
InterlockedIncrement
oleaut32
VariantInit
VariantClear
VariantChangeType
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayGetVartype
LoadRegTypeLi
LoadTypeLi
SafeArrayCopy
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
ole32
CoCreateInstance
setupapi
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDeleteDeviceInfo
CM_Get_Device_IDW
CM_Get_DevNode_Status
SetupGetFieldCount
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ