Static task
static1
Behavioral task
behavioral1
Sample
cbec65d75dbd4e0dc83764d3b14b269648c13d952e65d9df3cb88306533ad500.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbec65d75dbd4e0dc83764d3b14b269648c13d952e65d9df3cb88306533ad500.exe
Resource
win10v2004-20220812-en
General
-
Target
cbec65d75dbd4e0dc83764d3b14b269648c13d952e65d9df3cb88306533ad500
-
Size
171KB
-
MD5
6a4ac23a6a327a10f69d88754f17c640
-
SHA1
5a5c1d7ca7706cb9eb5ac5326c31f714be9870e5
-
SHA256
cbec65d75dbd4e0dc83764d3b14b269648c13d952e65d9df3cb88306533ad500
-
SHA512
1021c8f85f29ec922fa278a491452c61302014c2cbd67424f06e0320fce1f22750488717f00c7cb4db072e3cdd4f7911325851e0561c07cc10fa1caea7a7c4a2
-
SSDEEP
3072:5ZWyq6+E2ANtS/tlGk7NyAK4wrU0jC5GU:ONtE2ANigk7NBwrUfL
Malware Config
Signatures
Files
-
cbec65d75dbd4e0dc83764d3b14b269648c13d952e65d9df3cb88306533ad500.exe windows x86
d05e81f8d869198af459e9b4ec135887
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetComputerNameA
lstrcpyA
ResetEvent
VirtualFree
OutputDebugStringA
ExitProcess
GetCurrentThread
GetSystemDirectoryA
ReadFile
GetCurrentProcess
GetCurrentProcessId
CreateFileA
SetFilePointer
LocalAlloc
CreateThread
GetFileSize
GetWindowsDirectoryA
SetEvent
GetStdHandle
GetCurrentDirectoryA
ExitThread
GetProcAddress
GetModuleHandleA
LoadLibraryA
CloseHandle
CreateEventA
ResumeThread
CreateSemaphoreA
ReleaseMutex
GetVersionExA
WriteFile
CreateMutexA
LocalFree
GetCurrentThreadId
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
advapi32
GetUserNameA
user32
GetSystemMetrics
GetWindow
CreateDialogParamA
GetActiveWindow
MessageBoxA
ShowWindow
FindWindowA
wsprintfA
SendMessageA
GetClassInfoExA
PostMessageA
GetForegroundWindow
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ