Static task
static1
Behavioral task
behavioral1
Sample
1cb1f3d1fcdc4e4ded9b52f35c6cda62c8020dae73dfa1863f1505fc98777eb7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1cb1f3d1fcdc4e4ded9b52f35c6cda62c8020dae73dfa1863f1505fc98777eb7.exe
Resource
win10v2004-20220901-en
General
-
Target
1cb1f3d1fcdc4e4ded9b52f35c6cda62c8020dae73dfa1863f1505fc98777eb7
-
Size
52KB
-
MD5
85fd1347029cff270f3dd4e6c817f4bb
-
SHA1
1490f0f6e35704654985b0c7b82f1a231c0e5fab
-
SHA256
1cb1f3d1fcdc4e4ded9b52f35c6cda62c8020dae73dfa1863f1505fc98777eb7
-
SHA512
e546597d73803486f23933e25cc40de6b60f0812e818b02fae19bca944e7f0fb4c2de8941a0919c66b376414b74becd6457d7e0e1729acb546c09a91fb28d801
-
SSDEEP
768:HWzEVIk+6mCBT8YH3B5hUbBMsA7T2htl:4EVE5YXBc2sQOtl
Malware Config
Signatures
Files
-
1cb1f3d1fcdc4e4ded9b52f35c6cda62c8020dae73dfa1863f1505fc98777eb7.exe windows x86
606a5ba6734264e1e2a84a4065dddd90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
Sleep
SetUnhandledExceptionFilter
GetModuleFileNameA
ExpandEnvironmentStringsA
SetLastError
lstrcmpiA
lstrlenA
lstrcpyA
FindResourceA
LoadResource
LockResource
SizeofResource
HeapFree
ExitProcess
lstrcatA
GetLastError
HeapAlloc
GetModuleHandleA
GetProcAddress
RtlUnwind
HeapReAlloc
RaiseException
GetStartupInfoA
GetVersion
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
ReadFile
GetStringTypeW
user32
PostThreadMessageA
GetMessageA
wsprintfA
GetInputState
advapi32
RegDeleteKeyA
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ