Static task
static1
Behavioral task
behavioral1
Sample
cf8dc5ff65ad31db9d213925db7474189c5fee6b7ac180cbfd63b262936b34da.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf8dc5ff65ad31db9d213925db7474189c5fee6b7ac180cbfd63b262936b34da.exe
Resource
win10v2004-20220812-en
General
-
Target
cf8dc5ff65ad31db9d213925db7474189c5fee6b7ac180cbfd63b262936b34da
-
Size
172KB
-
MD5
d7f71d83212bdec1e8d167689792a2d6
-
SHA1
df509a85f86c634fbb255af044f55aa3d5678649
-
SHA256
cf8dc5ff65ad31db9d213925db7474189c5fee6b7ac180cbfd63b262936b34da
-
SHA512
b7aeb8f60439f6d69d84a8837ce132151f6cb67d020cec44008a1fa9e2b4f29e689dd276675edb1b9dc72acb0d9d6cfe510874dd54ed4b9e169bed2d1e57bd10
-
SSDEEP
3072:GTDe1ALKu5GF6xm7NI+inhd3x480mXjodBVCPbmVdP+Agiid1Rg9zJIHJDrWVtw6:MDe14RxaohRx48sYPb2dGsqkzKHJkw6
Malware Config
Signatures
Files
-
cf8dc5ff65ad31db9d213925db7474189c5fee6b7ac180cbfd63b262936b34da.exe windows x86
623b7f71cb4298837a1f8eafc8a9e68f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
GetAcceptLanguagesA
PathCreateFromUrlW
UrlUnescapeW
PathAppendW
StrCmpIW
UrlCreateFromPathW
PathIsRelativeW
PathRemoveFileSpecW
PathFindExtensionW
PathCombineW
kernel32
GetTickCount
TerminateProcess
FoldStringW
GlobalFindAtomW
UnhandledExceptionFilter
VirtualProtect
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
GetCurrentProcessId
GetCurrentProcess
EnumResourceLanguagesA
GetStartupInfoA
InterlockedCompareExchange
GetPrivateProfileSectionW
GetCurrentThreadId
GetSystemTimeAsFileTime
GetProcessHeap
LocalAlloc
SetUnhandledExceptionFilter
GetLocaleInfoW
InterlockedExchange
DeleteFileW
oleacc
CreateStdAccessibleObject
Sections
.text Size: 86KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ