Static task
static1
Behavioral task
behavioral1
Sample
cbb81c0d3e31e3195a0bd825fbf69f0c045c27fcdf027c2c72a317cd2b9d5cae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbb81c0d3e31e3195a0bd825fbf69f0c045c27fcdf027c2c72a317cd2b9d5cae.exe
Resource
win10v2004-20220812-en
General
-
Target
cbb81c0d3e31e3195a0bd825fbf69f0c045c27fcdf027c2c72a317cd2b9d5cae
-
Size
25KB
-
MD5
4112e544a9d09b79e8d634daa09d1650
-
SHA1
e7e8a3d98b764270ba73522f11ea3f235d6768d0
-
SHA256
cbb81c0d3e31e3195a0bd825fbf69f0c045c27fcdf027c2c72a317cd2b9d5cae
-
SHA512
21b939cb9decf2a58e9e52ba57936fe0210a27db7bfb09fd996c67c98e7ca73d1bb27f5dcf3ee95319d9fc8f2468aae916f8f53ea2d3d8058ec27cb6f56072f8
-
SSDEEP
768:R/6sJTmjqySVPBVMSKED2AQuwYJBGC0K:cimefPBVMID2nuR3D0K
Malware Config
Signatures
Files
-
cbb81c0d3e31e3195a0bd825fbf69f0c045c27fcdf027c2c72a317cd2b9d5cae.exe windows x86
a98182c915ff1a54f8c1821f8bd8d534
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CloseHandle
LocalFree
FormatMessageW
GetLastError
CreateProcessW
GetSystemDirectoryW
HeapSetInformation
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
MessageBoxW
msvcrt
__setusermatherr
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__fmode
__set_app_type
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
memset
_vsnwprintf
__p__commode
ntdll
NtQueryInformationProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE