Static task
static1
Behavioral task
behavioral1
Sample
cd780446e0e31d599efd6d86b48e54d90a127c43d370f8cf70af75a45a8ced5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd780446e0e31d599efd6d86b48e54d90a127c43d370f8cf70af75a45a8ced5e.exe
Resource
win10v2004-20221111-en
General
-
Target
cd780446e0e31d599efd6d86b48e54d90a127c43d370f8cf70af75a45a8ced5e
-
Size
18KB
-
MD5
33dc768d03a74037cabdad10da9cb022
-
SHA1
6a4c984047fddbf0ab7dad58a557bfaa55acc8bf
-
SHA256
cd780446e0e31d599efd6d86b48e54d90a127c43d370f8cf70af75a45a8ced5e
-
SHA512
710b9a96529277576a9e7c28f2d9e4a801714d73f07b2f9a97768cf4956ea0505afed75b6e72a3c92a194071ee27b0af397f7517058aed6beefb93875f162ef6
-
SSDEEP
384:8MQqCpOIUu+bkAkQpXLOvc1xSVC6eSMRJjlIAz:xQqsOIg9pbA0kC7RsS
Malware Config
Signatures
Files
-
cd780446e0e31d599efd6d86b48e54d90a127c43d370f8cf70af75a45a8ced5e.exe windows x86
43448cf842f1344603805f6dc56a2a90
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
GetCommandLineA
SetUnhandledExceptionFilter
InitializeCriticalSection
GetLastError
GetCurrentDirectoryA
SetStdHandle
InterlockedCompareExchange
CloseHandle
lstrcmpiA
WriteFile
GetStdHandle
EnterCriticalSection
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteFileA
GetTickCount
DeleteCriticalSection
SetFilePointer
GetDriveTypeA
GetFileType
GetCurrentProcessId
IsDebuggerPresent
CreateFileA
LeaveCriticalSection
InterlockedIncrement
ReadFile
ExitProcess
LocalFree
FormatMessageA
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
TerminateProcess
user32
wsprintfA
MessageBoxA
SetWindowPos
GetDlgItem
CreateWindowExA
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ