Static task
static1
Behavioral task
behavioral1
Sample
cd44ec9abb7ab092de047f50a5b73b33e4eb4257c65b47b31f5e72d482372a20.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd44ec9abb7ab092de047f50a5b73b33e4eb4257c65b47b31f5e72d482372a20.exe
Resource
win10v2004-20220901-en
General
-
Target
cd44ec9abb7ab092de047f50a5b73b33e4eb4257c65b47b31f5e72d482372a20
-
Size
248KB
-
MD5
df0644bcea4c68c4c19d3843825ced40
-
SHA1
595891f91a334b44ff93b8dacad405f4c7d513bb
-
SHA256
cd44ec9abb7ab092de047f50a5b73b33e4eb4257c65b47b31f5e72d482372a20
-
SHA512
d7adf9ec11dd7ed19c2f21a383df593e0be021f89da03163ceff4e7b9f21b8580ee20992e4c08a879ba1bab7904ed09834a8f48d932ae0b7f25edc4ea130c5a4
-
SSDEEP
3072:F2OemzGfHjvL2z4PMsJrmTguNGGVNzgg+UTDdhfTGy+H+U9ABylfz/Cr8IxG8A5c:F2ODzGfDvL2E0sJMguNxgrL9l9SXxd
Malware Config
Signatures
Files
-
cd44ec9abb7ab092de047f50a5b73b33e4eb4257c65b47b31f5e72d482372a20.exe windows x86
7dfb0340ce2ea2fb0517a0d33560f132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LocalReAlloc
lstrlenA
SetFilePointer
ReadFile
VirtualFree
MoveFileA
VirtualAllocEx
LoadLibraryExA
GetCommandLineA
lstrcpyA
RaiseException
ExitProcess
ExitThread
SetThreadLocale
SetHandleCount
WriteFile
GetVersionExA
SizeofResource
IsBadReadPtr
WaitForSingleObject
SetLastError
VirtualAlloc
IsBadHugeReadPtr
MoveFileExA
GetCommandLineW
LocalFree
GetProcAddress
MulDiv
lstrcatA
lstrcmpA
lstrcmpiA
user32
GetKeyboardType
GetMenuItemID
GetKeyboardLayoutNameA
GetWindowLongA
GetMessagePos
GetSystemMenu
GetDC
InflateRect
GetMenuStringA
IsWindow
GetKeyNameTextA
GetClientRect
GetClassNameA
GetFocus
GetWindowRect
IsZoomed
IsChild
GetDlgItem
GetWindowThreadProcessId
GetCursor
IsWindowVisible
GetForegroundWindow
IsIconic
GetScrollInfo
GetTopWindow
GetDCEx
gdi32
CopyEnhMetaFileA
CreateBitmap
BitBlt
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES11 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES77 Size: 512B - Virtual size: 185B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES04 Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES59 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES63 Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES21 Size: 512B - Virtual size: 259B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ