Static task
static1
Behavioral task
behavioral1
Sample
c0ba3e7e12a5e85f3be1f66d1fc7c23e6e4373adfa352c66307d15d629424a6d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0ba3e7e12a5e85f3be1f66d1fc7c23e6e4373adfa352c66307d15d629424a6d.exe
Resource
win10v2004-20221111-en
General
-
Target
c0ba3e7e12a5e85f3be1f66d1fc7c23e6e4373adfa352c66307d15d629424a6d
-
Size
1.6MB
-
MD5
33a1eb84b114447274db5d2bd37104c8
-
SHA1
91790862bf2c0578b992542d147e8ced45ad52e9
-
SHA256
c0ba3e7e12a5e85f3be1f66d1fc7c23e6e4373adfa352c66307d15d629424a6d
-
SHA512
c491e5697dd5deacf80738dd7238531a7f40096f5894ac034b17e623e48440389930993d01052b93300d0027386eaef742aed026dfa526276a2743681171497f
-
SSDEEP
49152:kljJacRKYB0ZzwPAO8Wp/3elmYZg+1B4qU3R+:klN9PF1tGg+1B4R3R+
Malware Config
Signatures
Files
-
c0ba3e7e12a5e85f3be1f66d1fc7c23e6e4373adfa352c66307d15d629424a6d.exe windows x86
765e2cb8c55fde1dc12a4a09b692ba61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
getsockname
kernel32
GetTimeZoneInformation
user32
GetClipboardData
gdi32
GetTextMetricsA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CreateILockBytesOnHGlobal
oleaut32
SafeArrayCreate
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetTimeFromSystemTime
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 572KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ