Static task
static1
Behavioral task
behavioral1
Sample
cb79ff3dee8460992274f7df32aa0180f738473ca832c98bde810e58a86f7faf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb79ff3dee8460992274f7df32aa0180f738473ca832c98bde810e58a86f7faf.exe
Resource
win10v2004-20221111-en
General
-
Target
cb79ff3dee8460992274f7df32aa0180f738473ca832c98bde810e58a86f7faf
-
Size
544KB
-
MD5
2f9974b2225b2b85f72a2c13029e185e
-
SHA1
3f2a15f26868236642b228788a1629f652d096bc
-
SHA256
cb79ff3dee8460992274f7df32aa0180f738473ca832c98bde810e58a86f7faf
-
SHA512
154baf984214fb1d3256d83073f1f1d9ac218b585be8f4adb55dfda3b1faabe2f76eeb68fcf9094a1499faead643311f4b263efe01914e8691764ecd837f6895
-
SSDEEP
12288:X9H4pumP4KPPFZd4UNildvw439IWTQEjomFfZ7:tYA/KPPFZdaA298E/pZ
Malware Config
Signatures
Files
-
cb79ff3dee8460992274f7df32aa0180f738473ca832c98bde810e58a86f7faf.exe windows x86
cd5a9061e83ab8738230e5c71dd8eae6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_ReplaceIcon
CreatePropertySheetPageA
ImageList_Write
CreateStatusWindow
ImageList_BeginDrag
ImageList_Remove
ImageList_Copy
CreateStatusWindowW
ImageList_Create
MakeDragList
ImageList_DrawIndirect
InitCommonControlsEx
CreatePropertySheetPage
ImageList_SetImageCount
ImageList_SetFilter
ImageList_Destroy
ImageList_GetDragImage
user32
UnregisterHotKey
RegisterClassA
DrawTextExW
DdeUnaccessData
RegisterClassExA
ScrollDC
DeleteMenu
MessageBoxA
ShowWindow
DefWindowProcW
GetClipboardFormatNameA
CreateWindowExA
DestroyWindow
GetWindowThreadProcessId
kernel32
GetStartupInfoA
GetLastError
WideCharToMultiByte
HeapDestroy
GetCurrentProcess
GetCommandLineA
HeapAlloc
WriteConsoleA
GetConsoleOutputCP
SetComputerNameW
CreateFileA
MultiByteToWideChar
GetModuleFileNameA
CompareStringA
FreeEnvironmentStringsA
GetUserDefaultLCID
GetEnvironmentStringsW
GetStringTypeW
InterlockedExchange
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
Sleep
LeaveCriticalSection
InterlockedDecrement
CloseHandle
OpenMutexA
GetLocaleInfoA
GetEnvironmentStrings
HeapSize
SetStdHandle
InterlockedIncrement
HeapReAlloc
RtlUnwind
GetDateFormatA
GetTickCount
GetTimeFormatA
GetModuleHandleA
LCMapStringA
GetCurrentThread
SetFilePointer
TlsSetValue
GetProcessHeap
WriteConsoleW
FreeEnvironmentStringsW
EnumSystemLocalesA
GetTimeZoneInformation
QueryPerformanceCounter
CompareStringW
TlsAlloc
GetOEMCP
VirtualFree
EnterCriticalSection
GetCurrentProcessId
GetProcAddress
VirtualQuery
ReadFile
UnhandledExceptionFilter
LCMapStringW
SetEnvironmentVariableA
FlushFileBuffers
WriteFile
FreeLibrary
GetCPInfo
GetVersionExA
GetLocaleInfoW
TerminateProcess
GetFileType
TlsFree
CreateMutexA
SetConsoleCtrlHandler
ExitProcess
LoadLibraryA
GetACP
InitializeCriticalSection
IsValidLocale
GetConsoleCP
GetStdHandle
HeapFree
SetLastError
SetHandleCount
TlsGetValue
GetSystemTimeAsFileTime
VirtualAlloc
IsValidCodePage
GetStringTypeA
HeapCreate
GetConsoleMode
DeleteCriticalSection
advapi32
RegEnumKeyExA
CryptDecrypt
RegEnumValueA
RegSetValueExA
RegEnumKeyA
CryptImportKey
LookupAccountSidA
CryptGenRandom
RegSetValueW
shell32
SHInvokePrinterCommandA
SHQueryRecycleBinW
gdi32
GetCharABCWidthsFloatA
ExtSelectClipRgn
CreateDCW
PolyBezier
TextOutA
ColorMatchToTarget
GetNearestColor
CreateScalableFontResourceA
GetColorAdjustment
CreateEllipticRgnIndirect
WidenPath
DescribePixelFormat
GetTextExtentExPointA
SetBitmapDimensionEx
GetRasterizerCaps
GetCharacterPlacementW
StartDocW
OffsetClipRgn
GetTextExtentPoint32W
SetSystemPaletteUse
Rectangle
GetPath
GetEnhMetaFileHeader
GdiFlush
SetPolyFillMode
Sections
.text Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 217KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ