Static task
static1
Behavioral task
behavioral1
Sample
cb7edc79727fd86f06ddbafee8d46f37b145a3f317bb3fde38eeb26f397372ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb7edc79727fd86f06ddbafee8d46f37b145a3f317bb3fde38eeb26f397372ec.exe
Resource
win10v2004-20221111-en
General
-
Target
cb7edc79727fd86f06ddbafee8d46f37b145a3f317bb3fde38eeb26f397372ec
-
Size
776KB
-
MD5
05e62877590e37ef31bdfe71eaef3fc7
-
SHA1
6863df140bb33568077cec0de09131650d3f97ab
-
SHA256
cb7edc79727fd86f06ddbafee8d46f37b145a3f317bb3fde38eeb26f397372ec
-
SHA512
4f60c3649a0ea6d9a0e1cd39adca680bcac3f38d8037a25bdf908b4fcb6fd05f12178fc9504437134f33e34ce67f12d40eb12cc8bcc977d154d3067c31427f1f
-
SSDEEP
12288:AbZn9wh0g9DIJXtnXN50zQ9PfAcDkSPcMxuTbaGMlFyMKXt31WpYcgq:GNxRJr8CPFtkM4RMFAtICq
Malware Config
Signatures
Files
-
cb7edc79727fd86f06ddbafee8d46f37b145a3f317bb3fde38eeb26f397372ec.exe windows x86
4edc55b01ba6af7d95394b8c63f7b102
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameW
GetFileTitleW
LoadAlterBitmap
ChooseFontW
wininet
FindFirstUrlCacheContainerA
FtpGetFileA
InternetGetConnectedStateEx
SetUrlCacheEntryGroup
InternetSetOptionW
RegisterUrlCacheNotification
FindNextUrlCacheGroup
FtpGetFileSize
gdi32
GetObjectA
SelectObject
SetPolyFillMode
StrokeAndFillPath
GdiPlayDCScript
DeleteObject
DeleteDC
PlgBlt
GetDeviceCaps
CreateDCW
PlayMetaFileRecord
comctl32
ImageList_SetImageCount
ImageList_DragEnter
InitCommonControlsEx
ImageList_Create
ImageList_GetImageRect
ImageList_GetBkColor
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_EndDrag
CreateToolbarEx
CreateStatusWindowA
ImageList_SetOverlayImage
CreatePropertySheetPageA
ImageList_LoadImageA
ImageList_Remove
kernel32
GetStringTypeW
FindResourceW
GetConsoleTitleA
InitializeCriticalSection
GetEnvironmentStrings
SetConsoleTextAttribute
lstrcpynW
ReadConsoleOutputAttribute
FindNextFileW
TerminateProcess
InterlockedDecrement
GetProcessShutdownParameters
OpenWaitableTimerA
SetConsoleCtrlHandler
GetConsoleMode
GetTimeZoneInformation
QueryPerformanceCounter
GetCommandLineA
SetConsoleWindowInfo
SetStdHandle
HeapFree
GetCPInfo
FreeEnvironmentStringsA
CreateMutexA
InterlockedIncrement
Sleep
EnumResourceLanguagesW
ExitProcess
LCMapStringW
DeleteCriticalSection
GetCurrentThread
EnterCriticalSection
ReadConsoleOutputCharacterA
GetSystemDirectoryW
MultiByteToWideChar
GetFullPathNameA
GetProcAddress
HeapSize
FreeEnvironmentStringsW
GetLastError
HeapDestroy
VirtualFree
WriteConsoleOutputA
WritePrivateProfileStringW
SetLastError
GlobalCompact
HeapAlloc
FlushFileBuffers
IsValidLocale
HeapReAlloc
WriteFile
CompareStringA
GetConsoleCP
RtlUnwind
GetFileType
OpenFileMappingA
LockFileEx
InterlockedExchange
HeapValidate
SetHandleCount
GetNumberFormatA
TlsGetValue
GetSystemTimeAsFileTime
SetFilePointer
GetCalendarInfoW
GetTickCount
CompareStringW
IsValidCodePage
FreeLibrary
GetCurrencyFormatA
GetWindowsDirectoryA
WritePrivateProfileStructA
SetWaitableTimer
GetTempFileNameA
GetLocaleInfoA
EnumSystemLocalesA
LoadLibraryExA
GetVersionExA
GetStringTypeA
TlsFree
CreateMutexW
SetFileAttributesA
WriteConsoleW
lstrlenA
GetConsoleOutputCP
LocalReAlloc
LCMapStringA
EnumTimeFormatsA
LocalUnlock
GetComputerNameA
GetTimeFormatA
GetDateFormatA
MoveFileExA
GetModuleHandleW
CreateWaitableTimerA
GetCalendarInfoA
GlobalGetAtomNameA
IsDebuggerPresent
GetProcessHeap
GetUserDefaultLCID
OpenMutexA
GetSystemTime
UnhandledExceptionFilter
GetPrivateProfileSectionA
GetLocaleInfoW
GetStartupInfoW
SetVolumeLabelA
GetACP
TlsAlloc
CreateFileA
GetCurrentProcessId
GetPrivateProfileIntA
GetCurrentThreadId
WriteProfileStringW
GetModuleHandleA
GetOEMCP
LeaveCriticalSection
TlsSetValue
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
VirtualAlloc
GetCommandLineW
CopyFileA
GetEnvironmentStringsW
GetModuleFileNameW
SetEnvironmentVariableA
HeapCreate
WriteConsoleA
GetCurrentProcess
LocalCompact
VirtualQuery
GetFileAttributesExW
lstrcmpi
EnumResourceTypesW
LocalSize
GetStartupInfoA
GetStdHandle
GetModuleFileNameA
CloseHandle
GetProfileIntA
WideCharToMultiByte
user32
wvsprintfA
RegisterClassExA
DdeAbandonTransaction
GetWindowModuleFileNameW
RegisterClassA
DdeImpersonateClient
GetWindowLongW
OpenWindowStationW
DdeQueryConvInfo
DdeDisconnectList
IsCharAlphaNumericW
CharUpperBuffW
DestroyWindow
CreateWindowExW
DefWindowProcA
ShowWindow
GetMonitorInfoA
BroadcastSystemMessage
MessageBoxW
GetUserObjectInformationW
EnumWindows
DdeSetUserHandle
RealGetWindowClass
IsWindow
UnloadKeyboardLayout
shell32
SHInvokePrinterCommandA
ShellExecuteExA
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 448KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ