Static task
static1
Behavioral task
behavioral1
Sample
cb43fa39fae8fcf34bc8e11c983175e9612f96794a4301c35f1b4267c81e8569.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cb43fa39fae8fcf34bc8e11c983175e9612f96794a4301c35f1b4267c81e8569.exe
Resource
win10v2004-20220901-en
General
-
Target
cb43fa39fae8fcf34bc8e11c983175e9612f96794a4301c35f1b4267c81e8569
-
Size
312KB
-
MD5
4424b166f764777133e284159d867f10
-
SHA1
34e1cac86496f934a4f5ddc033ac23d2a3ff4827
-
SHA256
cb43fa39fae8fcf34bc8e11c983175e9612f96794a4301c35f1b4267c81e8569
-
SHA512
c680a83a69d98fc28c3e2c89224179272b2176f96501ce711a3df7158ac49455b77cc38446e0a17bdd4cc389f2da4966a8b5d4ff034190aa1e88e1d006482b1b
-
SSDEEP
6144:WQ94WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:z94tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
cb43fa39fae8fcf34bc8e11c983175e9612f96794a4301c35f1b4267c81e8569.exe windows x86
bbfd35800ff45c5441c21c40e97efb7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
IsDebuggerPresent
FindAtomA
GetStdHandle
GetEnvironmentStringsA
WriteConsoleA
GlobalFree
FormatMessageA
FlushFileBuffers
GetCurrentThread
GetExpandedNameA
GetModuleHandleA
InterlockedExchange
GetCurrentProcessId
GetSystemDirectoryA
GetCompressedFileSizeA
GetACP
VirtualProtect
GetThreadPriority
HeapCreate
GetCurrentProcess
user32
ShowWindow
SetForegroundWindow
GetFocus
GetParent
SetActiveWindow
FillRect
wsprintfA
GetWindow
GetDlgItem
GetClassNameA
ValidateRgn
IsIconic
FrameRect
GetWindowTextLengthA
ReleaseDC
EndPaint
BeginPaint
GetCursorPos
DrawTextA
linkinfo
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
ResolveLinkInfoA
DestroyLinkInfo
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ