Static task
static1
Behavioral task
behavioral1
Sample
cabd74a424d3f2c8b09b90c3b012934bdcfeb92912109f5e97d074fb6ab5e0c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cabd74a424d3f2c8b09b90c3b012934bdcfeb92912109f5e97d074fb6ab5e0c3.exe
Resource
win10v2004-20220812-en
General
-
Target
cabd74a424d3f2c8b09b90c3b012934bdcfeb92912109f5e97d074fb6ab5e0c3
-
Size
70KB
-
MD5
9107641aef9714aeda948fc2858e2f60
-
SHA1
95da47caa9f86c6d27a457d7d4f80a680e667862
-
SHA256
cabd74a424d3f2c8b09b90c3b012934bdcfeb92912109f5e97d074fb6ab5e0c3
-
SHA512
032d586fe378cf98cffd88c92412360bb09c691847d2a1b2f2f97364699d431e426d2e62059b6cc436e1e092d459df5c2dff12ae236451966d0e9bed57ff4a92
-
SSDEEP
1536:N+QWvZ9SRqln5IUmDjoXVeSD1OW1W+GOYkXsWARRee:JWvZQRqln5Ie5O2DYQv
Malware Config
Signatures
Files
-
cabd74a424d3f2c8b09b90c3b012934bdcfeb92912109f5e97d074fb6ab5e0c3.exe windows x86
ef8a44fe2f9ad4ab85e55004aaa024a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSetInformation
QueryActCtxW
CloseHandle
SetFilePointer
ReadFile
CreateFileW
LocalFree
lstrlenA
WideCharToMultiByte
LocalAlloc
lstrlenW
GetProcAddress
WaitForSingleObject
CreateProcessW
GetCommandLineW
Wow64EnableWow64FsRedirection
GetSystemDirectoryW
GetNativeSystemInfo
IsWow64Process
GetCurrentProcess
SetProcessDEPPolicy
FormatMessageW
GetLastError
LoadLibraryExW
FreeLibrary
ExitProcess
SetErrorMode
DelayLoadFailureHook
InterlockedCompareExchange
LoadLibraryExA
Sleep
GetStartupInfoW
InterlockedExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CompareStringW
ReleaseActCtx
DeactivateActCtx
GetFileAttributesW
SearchPathW
CreateActCtxW
GetModuleHandleW
ActivateActCtx
user32
LoadIconW
CharNextW
DefWindowProcW
GetClassLongW
GetClassNameW
GetWindow
GetWindowLongW
SetWindowLongW
SetClassLongW
CreateWindowExW
RegisterClassW
LoadCursorW
LoadStringW
MessageBoxW
DestroyWindow
msvcrt
iswalpha
_wtoi
wcschr
__wgetmainargs
memset
_vsnwprintf
__set_app_type
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
imagehlp
ImageDirectoryEntryToData
ntdll
NtClose
NtOpenProcessToken
NtSetInformationToken
RtlImageNtHeader
NtSetInformationProcess
NtQueryInformationToken
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE