Static task
static1
Behavioral task
behavioral1
Sample
cabb6d081c9b66171c2e22aa611246e1dd18e38572a36b093439a713d2d43368.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cabb6d081c9b66171c2e22aa611246e1dd18e38572a36b093439a713d2d43368.exe
Resource
win10v2004-20220812-en
General
-
Target
cabb6d081c9b66171c2e22aa611246e1dd18e38572a36b093439a713d2d43368
-
Size
66KB
-
MD5
6471225443f4e92af8b067e25cd32610
-
SHA1
d4dd064eda327bc3d7a117786648133103e5ab2f
-
SHA256
cabb6d081c9b66171c2e22aa611246e1dd18e38572a36b093439a713d2d43368
-
SHA512
c5c02fe46613c87d5d6700ad6e06d30e2363e2d34dc53b26078a7617c8557a31dc0e6cdf036422fd605f04f84e9463846983be7749a1a4043164054381d452df
-
SSDEEP
1536:t7lksfx6/u3GxmjnQ85idNQX9xMdUjxmIKPpr:tBkSx6m3GEjLrUU1m3
Malware Config
Signatures
Files
-
cabb6d081c9b66171c2e22aa611246e1dd18e38572a36b093439a713d2d43368.exe windows x86
a3413127c6743c01eb25dad5e5808ecc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreW
SetFirmwareEnvironmentVariableA
CloseConsoleHandle
lstrcpyA
SetComputerNameW
InterlockedIncrement
AddLocalAlternateComputerNameA
DeleteCriticalSection
GetThreadIOPendingFlag
LZCreateFileW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE