Static task
static1
Behavioral task
behavioral1
Sample
cab0420fe29647bd7b268471d0eb9c400c08d4d0ff6a1917b744b7c383ad52d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cab0420fe29647bd7b268471d0eb9c400c08d4d0ff6a1917b744b7c383ad52d9.exe
Resource
win10v2004-20220812-en
General
-
Target
cab0420fe29647bd7b268471d0eb9c400c08d4d0ff6a1917b744b7c383ad52d9
-
Size
30KB
-
MD5
8c9702c56dde77ed63732f6272c2e86f
-
SHA1
cc956a9f5ce2024efff1f3fb81d8a3835532c280
-
SHA256
cab0420fe29647bd7b268471d0eb9c400c08d4d0ff6a1917b744b7c383ad52d9
-
SHA512
7965dbe80f9cd47fa1c94c1bb6052b3b7baddba7a6e6aed6fe159c45e4b43958c8a2f4991f0be9771c438073a10c8a7001b1c67eee617957eb4de352f3349560
-
SSDEEP
48:SMfWY7CdiVL7OfP1ClcAdGHaqdCm1AReKB8JeoB:lfWkofNwTvCmXkeo
Malware Config
Signatures
Files
-
cab0420fe29647bd7b268471d0eb9c400c08d4d0ff6a1917b744b7c383ad52d9.exe windows x86
8af1e557dee946cc7c0489928c12da84
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
lstrlenA
lstrcatA
DeleteFileA
GetVersion
GetSystemDirectoryA
GetModuleFileNameA
LocalFree
WinExec
CloseHandle
WriteFile
CreateFileA
LocalAlloc
ExitProcess
LoadLibraryA
GetCurrentProcess
user32
wsprintfA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE