CabalStart
Static task
static1
Behavioral task
behavioral1
Sample
958235ff11a56756630dc8aabc1043d564b87abd55786563a081104695604301.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
958235ff11a56756630dc8aabc1043d564b87abd55786563a081104695604301.dll
Resource
win10v2004-20220812-en
General
-
Target
958235ff11a56756630dc8aabc1043d564b87abd55786563a081104695604301
-
Size
4.8MB
-
MD5
540a79b340fac639c710b39e632d188e
-
SHA1
912347e648b7fa1247a78e46409e00bbf25436c9
-
SHA256
958235ff11a56756630dc8aabc1043d564b87abd55786563a081104695604301
-
SHA512
79d805e4cd7d4c6755cc5cf1835639655f4c84085df749504e3fc12d50e47c48c4b7a52ac197465941e1b387cb013e130d84aff87c56e04e675b727bd7e2a3f2
-
SSDEEP
49152:h4/H6FvdmQ5lp5jv4mTfuX8QPfG6fMP50w0ySL+Rpxms4vxnxhMrDsm8nvstm/PL:5AalHyS6fMP2w0rYJsRvMK/UMplJ9xQ
Malware Config
Signatures
Files
-
958235ff11a56756630dc8aabc1043d564b87abd55786563a081104695604301.dll windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 3.4MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wfeuyroa Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tdleflly Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE