Static task
static1
Behavioral task
behavioral1
Sample
cbdd8e2eccaa44f31b4217bd271f665becb2b9ffeaa8eb25c5920ef9b5d7026b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cbdd8e2eccaa44f31b4217bd271f665becb2b9ffeaa8eb25c5920ef9b5d7026b.exe
Resource
win10v2004-20220901-en
General
-
Target
cbdd8e2eccaa44f31b4217bd271f665becb2b9ffeaa8eb25c5920ef9b5d7026b
-
Size
134KB
-
MD5
9b5e34f679602ae9dc1964e6279e2b82
-
SHA1
e8a999d0c09a5cdec3b95b5f4289a0fc903bd263
-
SHA256
cbdd8e2eccaa44f31b4217bd271f665becb2b9ffeaa8eb25c5920ef9b5d7026b
-
SHA512
815d51b275e6867c7d05f4df94595d14dd2cac576aa7facb87f180627a06ff67118b489349e0334ec004abc540b565c040cad5395ad21d242693339d2fbfef1f
-
SSDEEP
1536:vj+o0ri+CdX9WysSZiekPoRmi+2nVwyO+ciXYH2hK98szTbMG2VfWWtr59iUV:7cfCt0SooRm3Z+zXYH2eAG6uW39r
Malware Config
Signatures
Files
-
cbdd8e2eccaa44f31b4217bd271f665becb2b9ffeaa8eb25c5920ef9b5d7026b.exe windows x86
83519c46f4b21690dad0c092f55e80e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
HeapSize
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
GetCPInfo
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LocalFree
GetVersionExA
LockResource
SetLastError
GetLastError
MulDiv
SizeofResource
Sleep
FormatMessageA
GetProcessHeap
GetTickCount
HeapAlloc
LoadResource
FindResourceA
GetNativeSystemInfo
SetHandleCount
user32
GetMessagePos
CopyRect
RegisterClassA
MoveWindow
ScreenToClient
SetTimer
GetDlgItemInt
EndPaint
GetWindow
CheckMenuItem
SetDlgItemTextA
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
SetMenuItemInfoA
FindWindowA
DestroyMenu
UpdateWindow
SetWindowTextA
IsWindowVisible
GetWindowRect
IsMenu
PostQuitMessage
GetClassInfoExA
KillTimer
LoadStringA
GetFocus
IsClipboardFormatAvailable
GetParent
InvalidateRgn
DefFrameProcA
wsprintfA
FindWindowW
GetClientRect
SendMessageA
BeginPaint
EnumWindows
GetMonitorInfoA
GetDC
InflateRect
CreateDialogIndirectParamA
SetDlgItemInt
GetMenu
GetKeyboardLayout
TrackPopupMenuEx
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
CreateWindowExA
ReleaseDC
MonitorFromWindow
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
SetWindowPos
CheckDlgButton
EnumChildWindows
ShowWindow
GetSysColorBrush
FrameRect
IsDlgButtonChecked
CreateDialogParamW
DrawMenuBar
IsWindow
DefMDIChildProcA
GetSystemMetrics
gdi32
CreateFontIndirectA
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
GetTextExtentPointA
CreatePen
GetStockObject
TextOutA
SetTextColor
StretchDIBits
DeleteDC
comdlg32
ChooseFontA
shell32
DragQueryFileA
DragAcceptFiles
DragFinish
ole32
CoTaskMemFree
ReleaseStgMedium
CreateStreamOnHGlobal
CoTaskMemAlloc
oleaut32
SysFreeString
CreateErrorInfo
SetErrorInfo
OleLoadPicture
SysAllocString
ws2_32
connect
WSAStartup
inet_addr
htons
shutdown
socket
gethostbyname
WSACleanup
winmm
timeGetTime
imm32
ImmGetContext
ImmReleaseContext
ImmSetOpenStatus
ImmAssociateContext
ImmGetProperty
ImmNotifyIME
ImmGetOpenStatus
ImmCreateContext
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ