Static task
static1
Behavioral task
behavioral1
Sample
ce6e56745e7dd093352e71c8e42d40a9f0145dd40fbfdbb0321798ddcae90f70.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce6e56745e7dd093352e71c8e42d40a9f0145dd40fbfdbb0321798ddcae90f70.exe
Resource
win10v2004-20221111-en
General
-
Target
ce6e56745e7dd093352e71c8e42d40a9f0145dd40fbfdbb0321798ddcae90f70
-
Size
766KB
-
MD5
500646afdf2fad925687b81d513d2c48
-
SHA1
c1cd5dcb987e16290424fb5872251c608f94418c
-
SHA256
ce6e56745e7dd093352e71c8e42d40a9f0145dd40fbfdbb0321798ddcae90f70
-
SHA512
f92f5c77e097490bff7c578d2832a0c891e2dd673950f736e1c80d81b534ba8677c78a267a448b0da4adea9b493bdd517d76746f2307b0a4d1c356a6df724af9
-
SSDEEP
12288:z9yRmNHq/Va27gVlNItcjnq3NzwCEZZCIAyYFFjJeekJrhPlOLT1m+3BkmjOz9pR:z9yoA/L7+PsVwZatFjWxlOv13xkmS9+C
Malware Config
Signatures
Files
-
ce6e56745e7dd093352e71c8e42d40a9f0145dd40fbfdbb0321798ddcae90f70.exe windows x86
31195f2ea1935fe900f07b8c89c53182
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
GetStdHandle
SetLastError
Sleep
GlobalFree
DeleteFileW
SetLastError
GetTickCount
CreateMutexW
HeapSize
GetProcessHeap
ReadConsoleW
CreateFileA
MapViewOfFile
GetStartupInfoA
CreateHardLinkW
GetLocalTime
CreateSemaphoreA
CreateDirectoryW
LoadLibraryA
GetFileSize
SetEvent
OpenSemaphoreA
VirtualProtect
GetPriorityClass
userenv
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
FindServices
SsdpStartup
SsdpCleanup
CleanupCache
Sections
.text Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE