Static task
static1
Behavioral task
behavioral1
Sample
cbbe56a4befb531799b9bb2c3785051fc48e32872e24ea957fa31535a86840ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbbe56a4befb531799b9bb2c3785051fc48e32872e24ea957fa31535a86840ac.exe
Resource
win10v2004-20220812-en
General
-
Target
cbbe56a4befb531799b9bb2c3785051fc48e32872e24ea957fa31535a86840ac
-
Size
69KB
-
MD5
ab44b9136a9f8b5f831bf73fb07d90b7
-
SHA1
a80b4d49b352af19b27bb483cd5c8d34146b47f4
-
SHA256
cbbe56a4befb531799b9bb2c3785051fc48e32872e24ea957fa31535a86840ac
-
SHA512
f3b5e12439358307dca97d6f43e1e4a36d0785b4b9da120010d5318f732187e0c3886a0051e3db2adcfea744a318f54b83271b5e00e5d0a8a620f92b8154f464
-
SSDEEP
1536:F8azlzZKSsZa99wKW3QmdKv0npQwxFexf8I/QB:OazlzZ9sZk9w3gUKvD4FeeIO
Malware Config
Signatures
Files
-
cbbe56a4befb531799b9bb2c3785051fc48e32872e24ea957fa31535a86840ac.exe windows x86
1f554e94486f11f66aab35947cc66c1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
MapUserPhysicalPages
WideCharToMultiByte
ExpungeConsoleCommandHistoryW
GetNumaProcessorMap
lstrcpyW
GetNativeSystemInfo
SetProcessAffinityMask
GetNumaAvailableMemory
GetProcessWorkingSetSize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE