Static task
static1
Behavioral task
behavioral1
Sample
cdd4cea737146db73b81213bdf99b4aae2fad770ec0292272d6bb55deb6788bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cdd4cea737146db73b81213bdf99b4aae2fad770ec0292272d6bb55deb6788bd.exe
Resource
win10v2004-20221111-en
General
-
Target
cdd4cea737146db73b81213bdf99b4aae2fad770ec0292272d6bb55deb6788bd
-
Size
338KB
-
MD5
f40dc1347768f1763fea0d50a6443091
-
SHA1
55bf519b023f81e4279bbba575c1c1227880a72b
-
SHA256
cdd4cea737146db73b81213bdf99b4aae2fad770ec0292272d6bb55deb6788bd
-
SHA512
df79a938f5fc782d827704103497b980a271f06ee3eefc819938be072b1b85cafb21ff4ca55912d63560a5b19a8d7c05845b94b3519f96d4ac80c2eaabbb8b40
-
SSDEEP
6144:X3nc64DCtD752cycYt4Tl9HSw4T2xmEKhDYfJE9kfIy4jNYoZooqwNgk:HcdK75tHYt4rj4TCxDfIyUjodk
Malware Config
Signatures
Files
-
cdd4cea737146db73b81213bdf99b4aae2fad770ec0292272d6bb55deb6788bd.exe windows x86
241f9056b190e502fda86d674fc16da0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetACP
HeapQueryInformation
GetTapeStatus
GetModuleHandleA
GetProcessVersion
GetEnvironmentStringsA
WaitForSingleObject
GlobalMemoryStatus
CreateIoCompletionPort
HeapCreate
InterlockedExchange
HeapDestroy
GetProcessHeap
GetTimeFormatA
GetCurrentProcessId
GetLogicalDrives
GetCurrentThread
GetStdHandle
LoadLibraryExA
IsDebuggerPresent
user32
GetDlgItem
GetWindowTextLengthA
GetFocus
DrawTextA
EndPaint
FillRect
wsprintfA
DragDetect
GetParent
BeginPaint
ShowWindow
ReleaseDC
GetWindow
FrameRect
SetForegroundWindow
GetCursorPos
SetActiveWindow
GetClassNameA
GetTitleBarInfo
gdi32
GetClipBox
CreateBitmap
GetLayout
CreatePalette
CloseFigure
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ