Static task
static1
Behavioral task
behavioral1
Sample
cebfdf8a73240e7ffd2ff1b894bacf9f9eb32aeb6ca7739aa33e078e291c4c7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cebfdf8a73240e7ffd2ff1b894bacf9f9eb32aeb6ca7739aa33e078e291c4c7c.exe
Resource
win10v2004-20220901-en
General
-
Target
cebfdf8a73240e7ffd2ff1b894bacf9f9eb32aeb6ca7739aa33e078e291c4c7c
-
Size
33KB
-
MD5
bfaea4cfcd71f07bd3274bd9e11148c3
-
SHA1
d7b4f58848629baea636e47fcd64a9526ff9546d
-
SHA256
cebfdf8a73240e7ffd2ff1b894bacf9f9eb32aeb6ca7739aa33e078e291c4c7c
-
SHA512
61c108d87bdf93458a0b28608520b2734440697daf08be5af9a4d277ccca33604f0c5272e79db28bc27c07c0ee5777802450635e7f9d91ea259f03abb67868cc
-
SSDEEP
768:Xe7FIvzKjDs8rJ+m+LAhuu45CPBOinSA9zywb:NzKjDVJpeAhuu45CJHSAcwb
Malware Config
Signatures
Files
-
cebfdf8a73240e7ffd2ff1b894bacf9f9eb32aeb6ca7739aa33e078e291c4c7c.exe windows x86
b68cef10946420af9c427b75313b9901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
SearchPathA
ReleaseMutex
FindAtomA
VirtualProtect
GetVersionExW
TlsGetValue
SetLastError
CloseHandle
DeleteCriticalSection
GetLastError
lstrlenA
GetModuleHandleA
SetEvent
CreateMutexA
FindClose
GetTickCount
Sleep
FindResourceExA
OpenMutexA
user32
DragDetect
DialogBoxParamA
GetMessageA
EndDialog
GetKeyState
CloseWindow
CreateMenu
IsIconic
CopyImage
CreateWindowExA
FlashWindow
EnableWindow
DispatchMessageA
EqualRect
loghours
DirSyncScheduleDialogEx
DialinHoursDialog
DialinHoursDialogEx
LogonScheduleDialog
DirSyncScheduleDialog
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ