Static task
static1
Behavioral task
behavioral1
Sample
cf37293f9b68a7c33ed6e97515c61fde7dc039c48d635721e05976d35a435e85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf37293f9b68a7c33ed6e97515c61fde7dc039c48d635721e05976d35a435e85.exe
Resource
win10v2004-20220812-en
General
-
Target
cf37293f9b68a7c33ed6e97515c61fde7dc039c48d635721e05976d35a435e85
-
Size
73KB
-
MD5
bee14f5a3f5a8dab1ac0506c657f57da
-
SHA1
5244e287cf99becd032db10aa0492cf2dc2621af
-
SHA256
cf37293f9b68a7c33ed6e97515c61fde7dc039c48d635721e05976d35a435e85
-
SHA512
2b3a273b56d074be6b6e44c5c9c0c89c145d1dec3af2fd49248bc506bce11786dd84b87e8163f7e2267a3d25cdf5f4fc1139249edee29d6bfdabb6aae186210a
-
SSDEEP
1536:4sbFm/o6YBPUbZ/ex/2ml6yAWwmfTlSjbjBu:/YotP5F2mlbAWwmfTlSnj
Malware Config
Signatures
Files
-
cf37293f9b68a7c33ed6e97515c61fde7dc039c48d635721e05976d35a435e85.exe windows x86
2a0776a225fa168b2ca76d264d3ac930
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualFree
VirtualAlloc
LoadLibraryA
GetProcAddress
GetLastError
GetThreadTimes
GetModuleHandleA
GetCurrentThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW
user32
EndDialog
GetDlgItem
SendMessageA
DialogBoxParamA
MessageBoxA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ