Static task
static1
Behavioral task
behavioral1
Sample
cd5e61635c29305e52c142f8c637466827f25312dd1a727a84ef438a40c6f36f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd5e61635c29305e52c142f8c637466827f25312dd1a727a84ef438a40c6f36f.exe
Resource
win10v2004-20220812-en
General
-
Target
cd5e61635c29305e52c142f8c637466827f25312dd1a727a84ef438a40c6f36f
-
Size
124KB
-
MD5
0da61c4529e2a742545e027c35f8e732
-
SHA1
37d012c57d14718cd865284d38ff78444da2a758
-
SHA256
cd5e61635c29305e52c142f8c637466827f25312dd1a727a84ef438a40c6f36f
-
SHA512
2c49bec39a416aa3dfd1f5ad62eecaccd763ad0557d86c0ffdc5ad97e3fead6137a603b1771bb30deb9d45190ee430c434545dd3b0dc602b7227df5428f72a74
-
SSDEEP
3072:Rs29T7e7X04KsH5bI8FcWHZlJXQauHloKYEoKv:C29T7uX0GZIIN4+KdoS
Malware Config
Signatures
Files
-
cd5e61635c29305e52c142f8c637466827f25312dd1a727a84ef438a40c6f36f.exe windows x86
c7fc2464545a89ea5a71d608eec6778a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetProcAddress
GetModuleHandleW
GetLongPathNameW
lstrlenW
CreateFileA
OutputDebugStringW
CreateFileW
LocalFree
LocalAlloc
LoadLibraryA
LoadLibraryW
ExitProcess
GetModuleHandleA
GetStartupInfoW
GetVersionExA
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
WriteFile
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetFilePointer
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
InitializeCriticalSection
VirtualProtect
GetSystemInfo
SetEndOfFile
ReadFile
HeapSize
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ