Static task
static1
Behavioral task
behavioral1
Sample
0cbd781208cd9a4e905afbfd914d8bca8308f33e69fa957ee8f1aeefeeb87fc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0cbd781208cd9a4e905afbfd914d8bca8308f33e69fa957ee8f1aeefeeb87fc2.exe
Resource
win10v2004-20220812-en
General
-
Target
0cbd781208cd9a4e905afbfd914d8bca8308f33e69fa957ee8f1aeefeeb87fc2
-
Size
300KB
-
MD5
63d8444408e640b2ee8139dae3a8dff0
-
SHA1
a1ad69fd59764d9df395ec9f810f4e074f969158
-
SHA256
0cbd781208cd9a4e905afbfd914d8bca8308f33e69fa957ee8f1aeefeeb87fc2
-
SHA512
57d295c4e799ce10188758396cb61ada16c4e95910c9c3242c0d50ac6b6fbd4a1550ddd6ebd49778608709f95e78d1a1f40741f06a15296a537440ebc5a1bcb8
-
SSDEEP
6144:SWn4bEss3sFO8ylrzPT5BVvnWy+D1hvnof47xqbbsNg5yh:Rd3cFBytX5nnWtDHokxaa
Malware Config
Signatures
Files
-
0cbd781208cd9a4e905afbfd914d8bca8308f33e69fa957ee8f1aeefeeb87fc2.exe windows x86
8b0600d7cb9995aaa3a48ef657f01bd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
HeapSize
FindResourceA
SetLastError
MapViewOfFile
VirtualProtect
GetStringTypeA
GetDriveTypeW
IsBadWritePtr
GetFileAttributesA
GetLocaleInfoA
TlsGetValue
GetModuleHandleA
FindClose
GetTickCount
ResetEvent
GetProcessHeap
RemoveDirectoryA
IsValidCodePage
GetExitCodeThread
CreateDirectoryA
user32
IsWindow
wsprintfW
GetCapture
IsDialogMessageA
LoadImageW
GetWindowLongW
SetFocus
PostMessageW
DispatchMessageA
SetCursor
LoadCursorA
GetWindowTextW
PeekMessageA
msaatext
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE