Static task
static1
Behavioral task
behavioral1
Sample
cb51b6ab77bf5c0a058ebd54466f230ff784ad291310cbe6f3c157ebd891d7c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb51b6ab77bf5c0a058ebd54466f230ff784ad291310cbe6f3c157ebd891d7c1.exe
Resource
win10v2004-20220812-en
General
-
Target
cb51b6ab77bf5c0a058ebd54466f230ff784ad291310cbe6f3c157ebd891d7c1
-
Size
127KB
-
MD5
6d2ade198143a35febba4764a074d7f0
-
SHA1
d8ccceee8cdad97a8f5e51e1c3c0372f1cfc0873
-
SHA256
cb51b6ab77bf5c0a058ebd54466f230ff784ad291310cbe6f3c157ebd891d7c1
-
SHA512
2e1e258583a69bc43f64d4be343c71dbaf79df8a0fe7e362c4c6ef2907a4fc5b3725f14f3f31c5e6659570dafa1f5cec94f144f42013cdaccf39e29fbbcac2a5
-
SSDEEP
3072:H4VIYPxMzpi2+ox73tzslTpSMM07PeJgU32Z1i:KIfti2++75s9p/P+gU3H
Malware Config
Signatures
Files
-
cb51b6ab77bf5c0a058ebd54466f230ff784ad291310cbe6f3c157ebd891d7c1.exe windows x86
7447a4f2d3d018bf564c23bc4b1dc5fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GlobalLock
DeviceIoControl
GetVersionExA
GetCurrentThread
HeapFree
CreateDirectoryW
VirtualProtectEx
GetFileAttributesW
GetDriveTypeA
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetStdHandle
RemoveDirectoryA
CloseHandle
GetStringTypeA
FindVolumeClose
GetFileAttributesW
CreateEventA
GlobalFlags
GetCurrentProcess
shell32
SHGetMalloc
ShellMessageBoxA
SHGetSettings
DllUnregisterServer
StrChrA
SHFree
ShellAboutA
DragAcceptFiles
DuplicateIcon
DragFinish
DragQueryFileA
DllUnregisterServer
ExtractIconA
ntmarta
AccConvertAclToAccess
AccFreeIndexArray
AccConvertSDToAccess
AccGetExplicitEntries
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ