Static task
static1
Behavioral task
behavioral1
Sample
cd264262f5e74c8c8e983f268ec016578d9276e86227a93af468ad04c551f6b4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cd264262f5e74c8c8e983f268ec016578d9276e86227a93af468ad04c551f6b4.exe
Resource
win10v2004-20220812-en
General
-
Target
cd264262f5e74c8c8e983f268ec016578d9276e86227a93af468ad04c551f6b4
-
Size
260KB
-
MD5
4905f3bb170601649af9feeb1ee1d0ed
-
SHA1
0cf48f9d7c235972c9ceb88406f3ebe7ce765ab4
-
SHA256
cd264262f5e74c8c8e983f268ec016578d9276e86227a93af468ad04c551f6b4
-
SHA512
af592d2e9bc59833ea509cdee4fc82cdae197aaaf8eacd720e429a47f75e2f27cbdf41c3db7eed5bcf566a0c624b0e69ce2a169c4098102229b55885c3124504
-
SSDEEP
6144:2Rl8v0nGkA4q8JFCfgZS44tU0e7ti/nanneMV:2RvGkpJJ4fgMHtfe8SF
Malware Config
Signatures
Files
-
cd264262f5e74c8c8e983f268ec016578d9276e86227a93af468ad04c551f6b4.exe windows x86
1588d2f7007d134aae5948186022bb06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetFileAttributesA
MoveFileA
CloseHandle
lstrlenA
WriteFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcatA
GetTempPathA
OutputDebugStringA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ReadFile
SetFilePointer
Sleep
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ