Static task
static1
Behavioral task
behavioral1
Sample
cb5a233da963f1252d874e86ec6d54f361b24e33da76b7f4779777aea455778b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb5a233da963f1252d874e86ec6d54f361b24e33da76b7f4779777aea455778b.exe
Resource
win10v2004-20220901-en
General
-
Target
cb5a233da963f1252d874e86ec6d54f361b24e33da76b7f4779777aea455778b
-
Size
318KB
-
MD5
8183baf7a702317313fbee57d5f46947
-
SHA1
14b1d4d3c60cc44e5db0178b2fb051853cec9a5b
-
SHA256
cb5a233da963f1252d874e86ec6d54f361b24e33da76b7f4779777aea455778b
-
SHA512
c7bceb7e04b4103f738c7e06624bfe308e75ca6378b96c425bf138eed744a5cca79fa07233fc7650911fa2fb7839826727406bbf3ce4895e3cf8f96315318bd5
-
SSDEEP
6144:u9od+u6EiW/ZHc5cvnjDVUNov++iidevIEJ+YksDkx6k24L0syQ:ulu6EL/ZHcwFdcIEw0kx6b4L/h
Malware Config
Signatures
Files
-
cb5a233da963f1252d874e86ec6d54f361b24e33da76b7f4779777aea455778b.exe windows x86
15b84b8a4a8a2e8dcfb461d9c16f357f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
MessageBoxA
RegisterWindowMessageA
SendMessageA
kernel32
WriteFile
WaitForSingleObject
Sleep
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetTickCount
LoadLibraryA
LoadResource
LocalAlloc
LockResource
SizeofResource
lz32
LZOpenFileA
LZCopy
LZClose
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 898B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 527B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE