Static task
static1
Behavioral task
behavioral1
Sample
cabd7b1f1a385ad58e520534962cad90afe43fe39c0a7d46c2f24feee4dcb50b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cabd7b1f1a385ad58e520534962cad90afe43fe39c0a7d46c2f24feee4dcb50b.exe
Resource
win10v2004-20220812-en
General
-
Target
cabd7b1f1a385ad58e520534962cad90afe43fe39c0a7d46c2f24feee4dcb50b
-
Size
234KB
-
MD5
34c888e7f0ad0fd446ed17fdfec7d9f7
-
SHA1
f14b4786b864ec99ac3f3b882cacca39c02e6ab1
-
SHA256
cabd7b1f1a385ad58e520534962cad90afe43fe39c0a7d46c2f24feee4dcb50b
-
SHA512
b249a403468ccef86346485cd781942a9f3433939fe333762a0ba9dbd91219e9fa051ac82fbdaa4410219de750b807979be6211be207ec05263737f5db209065
-
SSDEEP
3072:wY0Uv21X528aPFjBtZ54yG8LgZ6+thBbfVw6TpnhyT6rJKqYvR4kGMnta3:l0x03PFjvZ5zE3LVZhP2vi53
Malware Config
Signatures
Files
-
cabd7b1f1a385ad58e520534962cad90afe43fe39c0a7d46c2f24feee4dcb50b.exe windows x86
f25052a63ce66aac92945c954e2a2634
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
GetFileType
GetProcAddress
GetStringTypeA
HeapReAlloc
SetLastError
GetLastError
TlsGetValue
GetCurrentProcessId
HeapAlloc
GetCPInfo
IsBadWritePtr
TlsSetValue
GetModuleHandleA
FreeEnvironmentStringsW
WaitForDebugEvent
DeleteCriticalSection
InterlockedExchange
LeaveCriticalSection
GetCurrentThread
GetStartupInfoA
WriteFile
GetEnvironmentStringsW
GetACP
TlsAlloc
FreeEnvironmentStringsA
GetUserDefaultLCID
ExitProcess
GetTickCount
EnterCriticalSection
SetConsoleCursorInfo
HeapFree
GetVersion
GetModuleFileNameA
VirtualFree
LoadLibraryA
QueryPerformanceCounter
GetStringTypeW
VirtualAlloc
SetThreadContext
GetOEMCP
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
HeapCreate
LCMapStringA
SetHandleCount
TlsFree
ExitThread
GetCommandLineA
GetStdHandle
GetSystemTimeAsFileTime
HeapDestroy
GetEnvironmentStrings
GetSystemTime
InitializeCriticalSection
LCMapStringW
shell32
InternalExtractIconListA
SHFormatDrive
SHQueryRecycleBinW
ShellAboutA
ExtractIconExW
ExtractIconA
CheckEscapesW
SHGetSpecialFolderPathW
SHAppBarMessage
SHFreeNameMappings
DragQueryFileW
SHGetFileInfo
InternalExtractIconListW
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ