Static task
static1
Behavioral task
behavioral1
Sample
cd4bc6bf21e506496a9770e93947b525fa5716526aa454c9736f83732dfe1cd2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd4bc6bf21e506496a9770e93947b525fa5716526aa454c9736f83732dfe1cd2.exe
Resource
win10v2004-20220812-en
General
-
Target
cd4bc6bf21e506496a9770e93947b525fa5716526aa454c9736f83732dfe1cd2
-
Size
321KB
-
MD5
6b8f93c955ee75b795e7cbc1a0d23f0a
-
SHA1
3c4ef6832cb601776ab46b43a159b67bec8be7f2
-
SHA256
cd4bc6bf21e506496a9770e93947b525fa5716526aa454c9736f83732dfe1cd2
-
SHA512
39e15712ef652a6163628d17d614cff7a4ecc40d362b89e0aca775c891c27d39c6fb21072f45b63fd9c2bfe3f6906a4be2df0210016af18c4d89510df8963cfb
-
SSDEEP
6144:wL15/HAuhhfwFcia8UR4quzpuCSa8LOHHha6phow+MU+WKaPO8avHeaTd:wrBh4Fcia8U2qu4CH8LOHBLphwMxSfab
Malware Config
Signatures
Files
-
cd4bc6bf21e506496a9770e93947b525fa5716526aa454c9736f83732dfe1cd2.exe windows x86
c130a2a20d4971a6eef1840a6164aca0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateTokenEx
ImpersonateLoggedOnUser
RegOpenCurrentUser
Sections
0 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4Q3l3 Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ