Static task
static1
Behavioral task
behavioral1
Sample
cb0524870f4151c5f56a80cbcb841e337aa9b08299ec3d7a7c3293e64c911ab5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb0524870f4151c5f56a80cbcb841e337aa9b08299ec3d7a7c3293e64c911ab5.exe
Resource
win10v2004-20221111-en
General
-
Target
cb0524870f4151c5f56a80cbcb841e337aa9b08299ec3d7a7c3293e64c911ab5
-
Size
121KB
-
MD5
ae1c0e55f7df9fbc9e0a92fc53fce937
-
SHA1
5b678e752339dd01c5d50c37164e0ffd645e3abe
-
SHA256
cb0524870f4151c5f56a80cbcb841e337aa9b08299ec3d7a7c3293e64c911ab5
-
SHA512
d5091cc8627bc90fd00436112c571bde10b1b1ec6f70def5df5376ec31b4515131ab1695738fa4b525cfef793d0b61e6ff753e061eba9a68b9e0fa9c66894c0a
-
SSDEEP
3072:rsAsqLQiQC9Tglesq6Q+HkRj5nsj5Rm+I:xViesz/4j5nsq
Malware Config
Signatures
Files
-
cb0524870f4151c5f56a80cbcb841e337aa9b08299ec3d7a7c3293e64c911ab5.exe windows x86
0c8448d3c6a1ca179822a9fc9d000588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
CompareStringA
LoadLibraryA
GetLastError
SetLastError
GetSystemDirectoryA
FreeLibrary
advapi32
RegCloseKey
xprt5
?CompareNoCase@TBstr@XPRT@@QBEHPBG@Z
?TestAccess@TFile@XPRT@@SA_NPBGI@Z
??0TBstr@XPRT@@QAE@PBDPBG@Z
?Right@TBstr@XPRT@@QBE?AV12@H@Z
?GetLength@TBstr@XPRT@@QBEHXZ
??0TBstr@XPRT@@QAE@PBG@Z
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
?Left@TBstr@XPRT@@QBE?AV12@H@Z
?ReverseFind@TBstr@XPRT@@QBEHG@Z
??0TBstr@XPRT@@QAE@ABV01@@Z
??1TBstr@XPRT@@QAE@XZ
kSystemEncoding
?Append@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?GetString@TBstr@XPRT@@QBEPBGXZ
?GetAt@TBstr@XPRT@@QBEGH@Z
?Find@TBstr@XPRT@@QBEHGH@Z
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE