Static task
static1
Behavioral task
behavioral1
Sample
cad93173062d41c8529b2ea98e3846cda51b3c6fbad1448dc240f05e21d59118.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cad93173062d41c8529b2ea98e3846cda51b3c6fbad1448dc240f05e21d59118.exe
Resource
win10v2004-20221111-en
General
-
Target
cad93173062d41c8529b2ea98e3846cda51b3c6fbad1448dc240f05e21d59118
-
Size
328KB
-
MD5
f0d815346d1fb9e2cef287324757c594
-
SHA1
8a14a0ed5eb479fd9704d411bf84c6b1e53700d6
-
SHA256
cad93173062d41c8529b2ea98e3846cda51b3c6fbad1448dc240f05e21d59118
-
SHA512
bcdded48015d754e403fce879207c274848e59abcc4bdc57e2d90194e0fb28c7ac0a916136d5a11398263acf906b6505f2e75818be1bbad6bb7ce959f2bcc948
-
SSDEEP
6144:lv17zNSLrhszo1wRCEAevLTJ89yb/13la1:xF0eHCO1lW
Malware Config
Signatures
Files
-
cad93173062d41c8529b2ea98e3846cda51b3c6fbad1448dc240f05e21d59118.exe windows x86
15e8f850c72460ba326f86a870daa687
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
strcmp
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 208B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE