Static task
static1
Behavioral task
behavioral1
Sample
ceb7a15f3d5f1e33a3e6e3170c72b96f201244b6a67b889caac9eec9ec2f512a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ceb7a15f3d5f1e33a3e6e3170c72b96f201244b6a67b889caac9eec9ec2f512a.exe
Resource
win10v2004-20220812-en
General
-
Target
ceb7a15f3d5f1e33a3e6e3170c72b96f201244b6a67b889caac9eec9ec2f512a
-
Size
152KB
-
MD5
a9da9469381e8beba5406672164cab87
-
SHA1
48e3719202dba8f335d44943c1ffe80464806569
-
SHA256
ceb7a15f3d5f1e33a3e6e3170c72b96f201244b6a67b889caac9eec9ec2f512a
-
SHA512
cc8953c1140059aa8f3920e10a736a03b9edea0e463e3f291886b8af3004cdee3a9284d8f9992a426004c2bec80538dce86d5e183b27d4bdac00f725213f460b
-
SSDEEP
3072:rh1yeySNJDpW5lstRcOQdZ8Vc4d+PIL+vVrs4gA6e9MbzV8WxCg5Nb:F1HhUlsHQv8VkPIL+vVrsI6Nbz3xz
Malware Config
Signatures
Files
-
ceb7a15f3d5f1e33a3e6e3170c72b96f201244b6a67b889caac9eec9ec2f512a.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE