Static task
static1
Behavioral task
behavioral1
Sample
0cbd33a0b5333908a3b5f08a3642b141a298e6557bd99c41d35b3eb2c8e35d9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0cbd33a0b5333908a3b5f08a3642b141a298e6557bd99c41d35b3eb2c8e35d9f.exe
Resource
win10v2004-20220812-en
General
-
Target
0cbd33a0b5333908a3b5f08a3642b141a298e6557bd99c41d35b3eb2c8e35d9f
-
Size
28KB
-
MD5
657609d70c1b5d235f80a716ea75924b
-
SHA1
5204d0bb11ce2982168419f4bab5ab9453e1177b
-
SHA256
0cbd33a0b5333908a3b5f08a3642b141a298e6557bd99c41d35b3eb2c8e35d9f
-
SHA512
f54de14209800c5a02c14985716de4aba2f750a8d9068ed16d61406461e4b7b19834481d3ae65e8d5988bfb79ef79176c3b1a73853fa5840e0206d998a7f7428
-
SSDEEP
384:3ugkC6e3jQe3KTXdFnWehw9td9GSFPTc8wzeKsiksve/cNeksT:uCT6Wehw9Hgzv8/
Malware Config
Signatures
Files
-
0cbd33a0b5333908a3b5f08a3642b141a298e6557bd99c41d35b3eb2c8e35d9f.exe windows x86
1ce9c8e9e833b63ef446d89d8322c30f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
netapi32
DsGetDcNameW
DsGetDcNextA
msvcrt
fread
fopen
kernel32
QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetTickCount
CallNamedPipeA
SetFileTime
SetLocalTime
GetWindowsDirectoryA
mprapi
CompressPhoneNumber
MprAdminBufferFree
MprAdminConnectionClearStats
MprAdminConnectionEnum
MprAdminConnectionGetInfo
MprAdminDeregisterConnectionNotification
perfctrs
CloseDhcpPerformanceData
httpapi
HttpAddFragmentToCache
msi
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
activeds
ADsEncodeBinaryData
ADsFreeEnumerator
mshtml
CreateHTMLPropertyPage
CreateHTMLPropertyPage
Sections
text Size: 1KB - Virtual size: 10KB
IMAGE_SCN_MEM_READ
.bss Size: 10KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ