Static task
static1
Behavioral task
behavioral1
Sample
cd5aaa8e85a58e4251f6e0f5e1454ed45ed8f83901d6189b6f93938f2cabe19f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd5aaa8e85a58e4251f6e0f5e1454ed45ed8f83901d6189b6f93938f2cabe19f.exe
Resource
win10v2004-20221111-en
General
-
Target
cd5aaa8e85a58e4251f6e0f5e1454ed45ed8f83901d6189b6f93938f2cabe19f
-
Size
186KB
-
MD5
3c7ae193c9b80d0cf8f9d2db02c2f9f9
-
SHA1
c8f872151fcdffb163bdfc841d46fd2b9993c88c
-
SHA256
cd5aaa8e85a58e4251f6e0f5e1454ed45ed8f83901d6189b6f93938f2cabe19f
-
SHA512
1e23656d344b944c5ffe6fac2ee490547283ab4af5880beea5a704abe2bccfe09c60a1d6c6f4382a7f05abef4aff79cf2eb0dc444fce6ec8c8d91f404ff3becf
-
SSDEEP
3072:HMMVy/UvEgMwnlcVa/Agz2ld4zeYTGnZsHgZkL8E+BL3x1CkbKH:HMMVnMQcctQdYP0JE+dHa
Malware Config
Signatures
Files
-
cd5aaa8e85a58e4251f6e0f5e1454ed45ed8f83901d6189b6f93938f2cabe19f.exe windows x86
68fd01ac1cd8a512f3a1f1df708e9809
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
VirtualAllocEx
FileTimeToDosDateTime
GetDateFormatW
FindAtomW
LocalFree
SearchPathW
FindAtomA
lstrlenA
GetSystemDirectoryA
CreateSemaphoreW
WaitForMultipleObjects
GetSystemDefaultLangID
ExpandEnvironmentStringsA
CompareFileTime
CopyFileExW
GetVolumeInformationA
GetDiskFreeSpaceA
lstrcmpiW
GlobalGetAtomNameA
user32
GetActiveWindow
GetAsyncKeyState
GetMenuItemInfoW
GetCapture
PeekMessageW
GetDesktopWindow
GetMessageW
CheckMenuItem
GetDCEx
MoveWindow
WinHelpW
SendMessageW
InsertMenuItemW
InsertMenuA
GetMenu
CreateWindowExA
SetCapture
InsertMenuItemA
GetKeyboardType
GetKeyboardLayout
CreateAcceleratorTableW
DialogBoxParamW
keybd_event
GetKeyState
LoadCursorW
CopyIcon
MonitorFromWindow
InvalidateRect
LoadMenuA
EnumWindows
SetWindowTextA
OffsetRect
PostMessageW
TrackPopupMenu
CreateDesktopW
MessageBoxIndirectW
UpdateLayeredWindow
DestroyMenu
SetDlgItemInt
dbgeng
DebugConnect
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ