Static task
static1
Behavioral task
behavioral1
Sample
2cbb88b2f7e4aa7c52cc44f32abcec65c24b7dc48ae1b8f4f7c42c9ab31c599a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2cbb88b2f7e4aa7c52cc44f32abcec65c24b7dc48ae1b8f4f7c42c9ab31c599a.exe
Resource
win10v2004-20220812-en
General
-
Target
2cbb88b2f7e4aa7c52cc44f32abcec65c24b7dc48ae1b8f4f7c42c9ab31c599a
-
Size
483KB
-
MD5
187e497c48f94fe2fde536cea4475e50
-
SHA1
e44ea3fa3122ee4c02162d3797ffeed6b50cb74d
-
SHA256
2cbb88b2f7e4aa7c52cc44f32abcec65c24b7dc48ae1b8f4f7c42c9ab31c599a
-
SHA512
622142ee2f9ee554a92434ce06e2e7e1127f34be7806af1e879eb83868df2aac407a23769b8a4b38bc1cad71ab4ea0cb86917bd5c36b21f5200c8b85aab1434d
-
SSDEEP
12288:e4gK1ISkpGQvSzmtlfz5bqGn6aRboj7NCWv+gd3yGzA:e4V18pLqzmtlf9bqGnWjBv+gd3hz
Malware Config
Signatures
Files
-
2cbb88b2f7e4aa7c52cc44f32abcec65c24b7dc48ae1b8f4f7c42c9ab31c599a.exe windows x86
b4f29a5a5bb08c533bf88beb32c50a84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
GetDC
ReleaseDC
IsWindow
TranslateMessage
InvalidateRect
FillRect
LoadStringA
BeginPaint
DestroyWindow
CheckMenuItem
PeekMessageA
LoadIconA
EndDialog
EnableWindow
PostQuitMessage
ScreenToClient
kernel32
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
ExitProcess
VirtualAlloc
GetModuleHandleW
SizeofResource
InterlockedDecrement
GetOEMCP
GetModuleFileNameW
WaitForSingleObject
CompareStringW
WideCharToMultiByte
GetSystemInfo
GetCurrentProcess
EnterCriticalSection
GetCurrentThreadId
SetEndOfFile
UnhandledExceptionFilter
FreeEnvironmentStringsW
lstrcpynA
FindClose
GlobalFree
GetStringTypeA
GetProcAddress
LeaveCriticalSection
QueryPerformanceCounter
GetStartupInfoW
LocalFree
GetVersionExA
HeapDestroy
HeapFree
GetStdHandle
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
TerminateProcess
CreateFileA
GetStringTypeW
lstrlenA
GetCPInfo
Sleep
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strcmpi
_exit
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ