Static task
static1
Behavioral task
behavioral1
Sample
c0be9bd3d5916c8e677e09c862ebde4c2262e15cf4bf959b73ad04b1870f226c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0be9bd3d5916c8e677e09c862ebde4c2262e15cf4bf959b73ad04b1870f226c.exe
Resource
win10v2004-20221111-en
General
-
Target
c0be9bd3d5916c8e677e09c862ebde4c2262e15cf4bf959b73ad04b1870f226c
-
Size
213KB
-
MD5
52d4fce190982f112a3aebd5ed952e30
-
SHA1
14bdd4153357614a33ac1e8cde06b433e7f33602
-
SHA256
c0be9bd3d5916c8e677e09c862ebde4c2262e15cf4bf959b73ad04b1870f226c
-
SHA512
0ce6fa67a73c4ce89fc976724033e510c1da2b9c8c84c09bc45877387870e978ec7610a7d4492a6a07f0b3b552b51a6d69776d7655e28e25b70694819bac63f8
-
SSDEEP
1536:Zbx40wnxEYkUplDKzwh/6hXwCApR39JDKt:lx4vxE03DKzwhSuCAp19l
Malware Config
Signatures
Files
-
c0be9bd3d5916c8e677e09c862ebde4c2262e15cf4bf959b73ad04b1870f226c.exe windows x86
5f60444810e591f9aa697b6c8b1f654b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
TerminateProcess
LocalFree
LocalFree
VirtualAlloc
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
SetUnhandledExceptionFilter
SetLastError
GetACP
GetACP
QueryPerformanceCounter
LeaveCriticalSection
lstrlenW
GetLastError
GetCommandLineW
CreateFileW
WideCharToMultiByte
ExitProcess
MultiByteToWideChar
lstrcmpiW
LoadLibraryA
InitializeCriticalSection
SetEvent
InterlockedDecrement
HeapFree
ReadFile
Sleep
GetCommandLineW
CloseHandle
CloseHandle
ExitProcess
LoadLibraryW
GetACP
GetVersionExA
LocalFree
InterlockedDecrement
GetStartupInfoW
SetFilePointer
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE