Static task
static1
Behavioral task
behavioral1
Sample
cb50534f3fc13ac8795aec1b5e30541a04cee2cd2d3c2a1e28f1b7745981de5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb50534f3fc13ac8795aec1b5e30541a04cee2cd2d3c2a1e28f1b7745981de5c.exe
Resource
win10v2004-20220812-en
General
-
Target
cb50534f3fc13ac8795aec1b5e30541a04cee2cd2d3c2a1e28f1b7745981de5c
-
Size
81KB
-
MD5
f71d639b3c2ca39ba59dad4d5bac2de8
-
SHA1
c73123b1e09059a5a9332684917cf33a7eea9b9e
-
SHA256
cb50534f3fc13ac8795aec1b5e30541a04cee2cd2d3c2a1e28f1b7745981de5c
-
SHA512
d552b5a41900316db4f76376f0a9bc03b864fe6c867ddb1aaf903a7f18b922f6a95bb116e81d2a90ae39129f190c79598c289522c0e851629b212d3f0c2c976b
-
SSDEEP
1536:apbwiYUEsH1CT4JE89exS0Xin0o2AteJbIzTsFdf:QbwD+1AU9e0kW0oPWbIzTsFdf
Malware Config
Signatures
Files
-
cb50534f3fc13ac8795aec1b5e30541a04cee2cd2d3c2a1e28f1b7745981de5c.exe windows x86
5eed596fd945af7b264d791fe02635ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
lstrcpyA
GetACP
FreeLibrary
GetACP
lstrcatA
GetACP
ExitProcess
GetACP
GetCommandLineA
GetACP
lstrcpynA
GetACP
GetLastError
GetACP
GetStdHandle
GetACP
GetCPInfo
GetACP
GetConsoleCP
GetModuleFileNameA
lstrcmpA
GetDateFormatA
lstrcpyA
GetLocalTime
lstrlenA
lstrcmpiA
GlobalFree
GetStringTypeA
GetFileAttributesA
GetLastError
GetModuleHandleA
lstrcatA
GetCPInfo
Sleep
GetStringTypeW
lstrcpynA
GetFileSize
WideCharToMultiByte
advapi32
RegLoadKeyA
RegReplaceKeyA
RegCreateKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegOpenKeyA
RegDeleteKeyW
RegQueryValueExA
RegEnumKeyA
RegDeleteValueW
RegOpenKeyExW
RegQueryValueA
RegQueryValueW
RegDeleteValueA
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyW
RegFlushKey
user32
DialogBoxParamA
EndDialog
GetWindowTextLengthA
LoadMenuA
DrawIcon
CalcMenuBar
GetMenu
AppendMenuA
LoadCursorA
CopyImage
CopyRect
CopyIcon
CreateIcon
IsWindow
DrawIconEx
AppendMenuW
DrawTextW
AlignRects
GetFocus
InsertMenuA
Sections
.tadt Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddaa Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bas Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.rddc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ