Static task
static1
Behavioral task
behavioral1
Sample
cab1dfbc951f673d374953e3721855c94c174b809d47b7d2984e29842bccd36a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cab1dfbc951f673d374953e3721855c94c174b809d47b7d2984e29842bccd36a.exe
Resource
win10v2004-20220812-en
General
-
Target
cab1dfbc951f673d374953e3721855c94c174b809d47b7d2984e29842bccd36a
-
Size
474KB
-
MD5
b60a2c5ee3aeb3338f35655d07ea7596
-
SHA1
3d60f8f71cab41c1016a9b265dc56a391ed9e2f7
-
SHA256
cab1dfbc951f673d374953e3721855c94c174b809d47b7d2984e29842bccd36a
-
SHA512
1b431fdf481eeef307418973ed5ce91cc5643f3fccc1b33d1e5fb3a7c3b91f5c0bef71ca1d1f02450867d51e2877476414f6fb69f9b3f45f465333aaf974191d
-
SSDEEP
6144:WHtZt1bss7IyNZwfL3UEDGI0JPfXhBQ+e9a7in5TwpBUNUqRW4qQchxTFAaoYsUR:yBVIGWlDmBma7inyUNU5acPyaolUtit
Malware Config
Signatures
Files
-
cab1dfbc951f673d374953e3721855c94c174b809d47b7d2984e29842bccd36a.exe windows x86
faf2ff335186cf9dae8da63bbeadc495
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
GetProcessHeap
WideCharToMultiByte
IsDebuggerPresent
GetProcAddress
GetStdHandle
HeapReAlloc
IsValidLocale
GetThreadLocale
GetDateFormatA
GetCurrentProcessId
LCMapStringW
AllocConsole
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
GetStringTypeA
GetLogicalDriveStringsA
MultiByteToWideChar
Sleep
WriteFile
SetEnvironmentVariableA
SetComputerNameW
GetLocaleInfoA
GetTimeFormatA
EnumResourceLanguagesA
GetCommandLineW
CreateMailslotA
VirtualFree
ExitProcess
GetTickCount
GetPrivateProfileSectionNamesW
LCMapStringA
HeapFree
SetPriorityClass
GetModuleFileNameA
GetFileType
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentVariableW
VirtualAlloc
SetLastError
InterlockedIncrement
SetHandleCount
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsGetValue
CompareStringA
EnumSystemLocalesA
GetACP
HeapDestroy
SetConsoleCtrlHandler
GetStartupInfoA
CreateMutexW
GetSystemTimeAsFileTime
CompareStringW
GetConsoleScreenBufferInfo
GetPrivateProfileStringA
DeleteCriticalSection
FreeEnvironmentStringsA
CreateSemaphoreA
InitializeCriticalSection
GetTimeZoneInformation
TlsFree
WritePrivateProfileSectionW
FreeLibrary
HeapSize
TlsSetValue
GetOEMCP
IsValidCodePage
GetCPInfo
ReadConsoleOutputAttribute
InterlockedExchange
GetEnvironmentStrings
TlsAlloc
SetFilePointer
GetUserDefaultLCID
DeleteFileA
GetCommandLineA
GetStringTypeW
GetModuleFileNameW
HeapAlloc
HeapCreate
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
GetLocaleInfoW
VirtualQuery
GetModuleHandleA
GetVersionExA
GetCurrentThread
GetLastError
RtlUnwind
GetNamedPipeHandleStateW
UnhandledExceptionFilter
GetPrivateProfileStructA
GetStartupInfoW
FreeEnvironmentStringsW
gdi32
RestoreDC
GetSystemPaletteEntries
GetGlyphOutlineW
GetNearestColor
SetICMMode
SetPixelV
SetWindowExtEx
SetRectRgn
GetViewportOrgEx
AbortDoc
GetPolyFillMode
GetTextExtentPoint32W
GetTextMetricsA
EnumFontFamiliesExW
DeleteEnhMetaFile
RemoveFontResourceW
DrawEscape
PtVisible
GetColorAdjustment
GetNearestPaletteIndex
AbortPath
GetCharWidth32A
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ