Static task
static1
Behavioral task
behavioral1
Sample
cbbc153c014eefbe14f50fae5b19471a6c25365d41e0a27ad0514045dee0df3b.exe
Resource
win10v2004-20220414-en
General
-
Target
cbbc153c014eefbe14f50fae5b19471a6c25365d41e0a27ad0514045dee0df3b
-
Size
290KB
-
MD5
62156df841fa668c986f4ece5993e958
-
SHA1
400f68805c2db259d648ee381ede61ff5e9a4a73
-
SHA256
cbbc153c014eefbe14f50fae5b19471a6c25365d41e0a27ad0514045dee0df3b
-
SHA512
0e198d5a0008f04d706a7dc2afb1b6528a6d756d7ea2eefc48948d912a096b66089320f75d69b27006c708aab884def124a8318c2ac02cff262a3adccaa90f0b
-
SSDEEP
6144:Ki3cxiDMCrBjmh99QLgAOTDyNHIpTf7OT7+fZi6ctu2:KecxiDMkFgdGRIZM+fZi6Cu
Malware Config
Signatures
Files
-
cbbc153c014eefbe14f50fae5b19471a6c25365d41e0a27ad0514045dee0df3b.exe windows x86
30bd52970a0ab2c057b7c31f539e387f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetStartupInfoW
ExitProcess
GetCurrentThreadId
TlsAlloc
TlsFree
GetCurrentProcess
TlsSetValue
GetCurrentProcessId
TlsGetValue
api-ms-win-core-console-l3-2-0
GetConsoleWindow
api-ms-win-core-localization-l1-2-0
LCMapStringEx
IsValidCodePage
GetCPInfo
EnumSystemLocalesW
GetOEMCP
GetUserDefaultLCID
IsValidLocale
GetACP
LCMapStringW
GetLocaleInfoW
api-ms-win-core-synch-l1-1-0
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-string-l1-1-0
GetStringTypeW
CompareStringW
WideCharToMultiByte
MultiByteToWideChar
user32
ShowWindow
MessageBeep
GetWindowThreadProcessId
PostMessageA
GetForegroundWindow
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
GetLastError
RaiseException
SetLastError
SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
api-ms-win-core-rtlsupport-l1-1-0
RtlUnwind
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineW
GetCommandLineA
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStdHandle
GetEnvironmentStringsW
api-ms-win-core-file-l1-1-0
GetFileType
SetFilePointerEx
FindClose
CreateFileW
ReadFile
FlushFileBuffers
FindNextFileW
FindFirstFileExW
GetFileSizeEx
WriteFile
api-ms-win-core-heap-l1-1-0
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapSize
HeapFree
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-console-l1-1-0
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
ReadConsoleW
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ