Static task
static1
Behavioral task
behavioral1
Sample
cab6ea32e3dd2e3efc73992f066fb250496bd81c4868b1b8f9b59d5480fa5d55.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cab6ea32e3dd2e3efc73992f066fb250496bd81c4868b1b8f9b59d5480fa5d55.exe
Resource
win10v2004-20220812-en
General
-
Target
cab6ea32e3dd2e3efc73992f066fb250496bd81c4868b1b8f9b59d5480fa5d55
-
Size
41KB
-
MD5
20296abd3504aa4bfea2202ee934cda2
-
SHA1
d903144f8d60a632ef54ab87a66e70f52f2239bf
-
SHA256
cab6ea32e3dd2e3efc73992f066fb250496bd81c4868b1b8f9b59d5480fa5d55
-
SHA512
44eca8b5430ad015de82a2bb14b5344e78dbe537bce1d0fb56a216e2c1825aa585ca1b09f711c794d93937ea3b335e9904dac1cb93574339d062f6ea39b66d2c
-
SSDEEP
768:omVG+PaT6kF71eOZap92+GSq51kaUmOkOWD0hZ3JMfi:omzRkBgOZDjSaNUmOkXD0v3Sf
Malware Config
Signatures
Files
-
cab6ea32e3dd2e3efc73992f066fb250496bd81c4868b1b8f9b59d5480fa5d55.exe windows x86
f1d64282b9f707b87698a250b6b5f84c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAddAtom
atl
AtlMarshalPtrInProc
kernel32
FreeLibrary
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
GetTickCount
SetLastError
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE