Static task
static1
Behavioral task
behavioral1
Sample
cdb7ae778d5f52d56260fdf0a22a2ffaec12c1fb690331cd946293c831455f28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cdb7ae778d5f52d56260fdf0a22a2ffaec12c1fb690331cd946293c831455f28.exe
Resource
win10v2004-20220812-en
General
-
Target
cdb7ae778d5f52d56260fdf0a22a2ffaec12c1fb690331cd946293c831455f28
-
Size
33KB
-
MD5
8677476509bcf146890c0edc6d30f449
-
SHA1
d82ab502d23aac5c9d8bd0bdce32168ec4f07517
-
SHA256
cdb7ae778d5f52d56260fdf0a22a2ffaec12c1fb690331cd946293c831455f28
-
SHA512
356ea4d49c413523a75da3669bdfc9091e964cb64a7c1f014983b0e1d6f41d2175775476722cfbc7ca56a76a39a8911eaf5bb48c39e9a92731be4350f167e093
-
SSDEEP
768:iT1HkgHBe8q4x3I9nohv6XuHS+EEEEEe5yg8+ft3dv3Hj:iTNV4A3nhSWBEEEEEZ/+9dvHj
Malware Config
Signatures
Files
-
cdb7ae778d5f52d56260fdf0a22a2ffaec12c1fb690331cd946293c831455f28.exe windows x86
500aa868475886d17757465e1e1482d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExW
msimg32
AlphaBlend
msvcrt
_CxxThrowException
wcscmp
wcstoul
wcschr
_wcsrev
_XcptFilter
_cexit
exit
_acmdln
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
_except_handler3
kernel32
LoadLibraryA
GlobalFree
GetStartupInfoA
GlobalLock
GlobalUnlock
lstrcpynW
GetCommandLineW
LocalAlloc
LocalReAlloc
lstrlenW
GetUserDefaultLCID
SystemTimeToFileTime
GetLocalTime
CreateThread
GetExitCodeThread
GetCurrentThreadId
gdi32
SetBkColor
GetDeviceCaps
SelectObject
SetStretchBltMode
GetDIBits
SelectClipRgn
ExcludeClipRect
BitBlt
SetTextColor
SetBkMode
DeleteDC
CreateCompatibleDC
GetStockObject
DeleteObject
StretchBlt
CreateDIBSection
user32
PostQuitMessage
DefWindowProcW
CallNextHookEx
GetClassNameW
EndMenu
OpenClipboard
CharNextA
CloseClipboard
SetWindowsHookExW
UnhookWindowsHookEx
GetSysColorBrush
LoadIconW
EnumChildWindows
SetWindowPos
GetSystemMetrics
UpdateWindow
SetDlgItemTextW
EnableMenuItem
CheckMenuItem
CheckMenuRadioItem
EnableWindow
LoadMenuW
GetDlgItem
DestroyWindow
GetClassInfoW
DispatchMessageW
CreateWindowExW
MessageBoxW
LoadStringW
SetProcessDefaultLayout
ole32
CoUninitialize
CoInitializeEx
Sections
.text Size: 21KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ