Static task
static1
Behavioral task
behavioral1
Sample
cdd5190fc4398898598a8cbc3aff8be085583ff5134691fc9683b4fc7a8a2d08.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cdd5190fc4398898598a8cbc3aff8be085583ff5134691fc9683b4fc7a8a2d08.exe
Resource
win10v2004-20221111-en
General
-
Target
cdd5190fc4398898598a8cbc3aff8be085583ff5134691fc9683b4fc7a8a2d08
-
Size
1.3MB
-
MD5
955e8a7380abf9ff06f9db438a582eeb
-
SHA1
e59ffd39ee052342c17552da4e454840cd4fa414
-
SHA256
cdd5190fc4398898598a8cbc3aff8be085583ff5134691fc9683b4fc7a8a2d08
-
SHA512
e08965408c31cc4107921a742d6a38eccb8199a320f0217af2b9b973e9adb059a8ce4c396538adc671f6b93d312ece100c2bb802096705f8f8ee91f061651d8b
-
SSDEEP
24576:e1Yr89QOjsxhdFRIsdDKKxPbvN+Ex0k0Nb+nHsoZgucPdd/8T4:Ya89QjxhFzKKJ5PHkPoT4
Malware Config
Signatures
Files
-
cdd5190fc4398898598a8cbc3aff8be085583ff5134691fc9683b4fc7a8a2d08.exe windows x86
6ca5fc0e721ab79b1998c6dff01af443
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
HeapFree
GetComputerNameA
GlobalSize
ReadFile
GetFileTime
FindFirstFileA
CopyFileA
LocalReAlloc
LocalAlloc
OpenFileMappingA
ExitProcess
LocalLock
GlobalAlloc
HeapFree
DeleteFileA
GetLastError
LocalLock
GetLastError
LocalSize
Sleep
GetCPInfo
GlobalUnlock
OpenFileMappingA
CreateDirectoryA
CopyFileA
Sections
.CODE Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 65B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ