Static task
static1
Behavioral task
behavioral1
Sample
cf33bcab8646d289becced814168cc523330f6a558581bf4a98376cb28f29c60.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf33bcab8646d289becced814168cc523330f6a558581bf4a98376cb28f29c60.exe
Resource
win10v2004-20221111-en
General
-
Target
cf33bcab8646d289becced814168cc523330f6a558581bf4a98376cb28f29c60
-
Size
49KB
-
MD5
7297c1e24cddb0df4740ea21b09d7998
-
SHA1
b51760c33c7001354288f217da05862ea58cb0e8
-
SHA256
cf33bcab8646d289becced814168cc523330f6a558581bf4a98376cb28f29c60
-
SHA512
66ead666e40c08c7e1b0a07b4ade35a1d9a82f565f0647a08733ded94f4e83ab0f06240218c83df5ad3346655c0bedafa66bfde0ea046ca79f591519b68c1875
-
SSDEEP
768:p3iRBV996KPBJ8DGBindkfcO8ir/nhP5HdSFiF8T2OzrOPhcVu1:st5JlsdkfcO8ir/nlnOPO6U
Malware Config
Signatures
Files
-
cf33bcab8646d289becced814168cc523330f6a558581bf4a98376cb28f29c60.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 43KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE