Static task
static1
Behavioral task
behavioral1
Sample
cb5a6819726f0424fdb8fed282d2a5dcd83b849c466457105e3414d18241bffd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb5a6819726f0424fdb8fed282d2a5dcd83b849c466457105e3414d18241bffd.exe
Resource
win10v2004-20220901-en
General
-
Target
cb5a6819726f0424fdb8fed282d2a5dcd83b849c466457105e3414d18241bffd
-
Size
15KB
-
MD5
87d222a10e0bcf5d1e3274823dd1941c
-
SHA1
c9095b64a9495d762a8ce158b02e1431b7539b9f
-
SHA256
cb5a6819726f0424fdb8fed282d2a5dcd83b849c466457105e3414d18241bffd
-
SHA512
ea196a331dc1cb702b61eb465e3175031c686e81ee795ed9445f9d92e7a0460b7f776ea56a22b92840109f56f5e8934edbcdcd0cdfbafe2f9e21e1ab084548ae
-
SSDEEP
192:9x3rQj0JR1ge1N8VBQZ6f1nyTVrSVYA7I5OpgFusX2rw1CDacq:TbEejg4N8VCEnyhMYAUQicsGrw1Cn
Malware Config
Signatures
Files
-
cb5a6819726f0424fdb8fed282d2a5dcd83b849c466457105e3414d18241bffd.exe windows x86
9fd546f7910260c1c5a19b67d983ffd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetVersionExA
GetCommandLineA
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WinExec
WriteFile
FindResourceA
ExitProcess
CreateFileA
GlobalAlloc
CloseHandle
user32
wsprintfA
MessageBoxA
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
msvcrt
_wfopen
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ