Static task
static1
Behavioral task
behavioral1
Sample
cdbde0516d022de11f099e2a8b2607c2fdaa0e56fcbc79e194023da96f9536ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cdbde0516d022de11f099e2a8b2607c2fdaa0e56fcbc79e194023da96f9536ef.exe
Resource
win10v2004-20221111-en
General
-
Target
cdbde0516d022de11f099e2a8b2607c2fdaa0e56fcbc79e194023da96f9536ef
-
Size
316KB
-
MD5
a509fb3e7d484b06f3473621e9dee717
-
SHA1
7cc346d3a061c1471ad9efda81001c0bd348f514
-
SHA256
cdbde0516d022de11f099e2a8b2607c2fdaa0e56fcbc79e194023da96f9536ef
-
SHA512
ce8d47af23e15418914b4c1fea9c3a57a73c9c837878c23b5898e59257d9f304c794dfc282c0e1b606ba0760a56e9958bb169137dc80d007466587d96b433e6e
-
SSDEEP
6144:TgUzVP6rNX+ZAQEqjbEY2L/iSiumcZrSf5G8LUu9d:Tgl5XGFgaDufZmfZH9d
Malware Config
Signatures
Files
-
cdbde0516d022de11f099e2a8b2607c2fdaa0e56fcbc79e194023da96f9536ef.exe windows x86
1da8990827987088b84954bed3335633
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
HeapDestroy
GetStdHandle
GetEnvironmentStringsA
GetACP
GetCurrentProcess
FlushFileBuffers
WriteConsoleA
HeapCreate
OpenSemaphoreA
IsDebuggerPresent
GetModuleHandleA
DeleteAtom
InterlockedExchange
VirtualProtect
GetTimeFormatA
GetCurrentThread
FormatMessageA
GetExpandedNameA
GetCurrentProcessId
GetThreadPriority
user32
ReleaseDC
GetDlgItem
EndPaint
SetForegroundWindow
GetCursorPos
wsprintfA
GetParent
ShowWindow
FillRect
DrawTextA
IsIconic
FrameRect
GetFocus
GetClassNameA
GetWindow
GetWindowTextLengthA
BeginPaint
ValidateRgn
SetActiveWindow
advapi32
RegFlushKey
RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegQueryInfoKeyA
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ