Start
Static task
static1
Behavioral task
behavioral1
Sample
cabfa99629d5237d654b35201b9e868ac931697484a433c9c49ad16733c98ff1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cabfa99629d5237d654b35201b9e868ac931697484a433c9c49ad16733c98ff1.dll
Resource
win10v2004-20221111-en
General
-
Target
cabfa99629d5237d654b35201b9e868ac931697484a433c9c49ad16733c98ff1
-
Size
12KB
-
MD5
0ec6592e2ac886c2533dd7ac94f895fc
-
SHA1
306d2f577b7bacc78e5c93179f5cdf4d5fb84b09
-
SHA256
cabfa99629d5237d654b35201b9e868ac931697484a433c9c49ad16733c98ff1
-
SHA512
2dec18588a8114b0106487d3f65184ac01837b6c7552f698edaf83cfd95e5d2c9c4bdfe5127b8aa519d424b8971cb39dacb6bfbd13d6d5b5b553da80b00fddce
-
SSDEEP
192:n1WtkbVWB3d/25tlhtRRZct868agEtemU2gIXmVWn7cCldbs3WgA:utOlhUUYXtn7dldbshA
Malware Config
Signatures
Files
-
cabfa99629d5237d654b35201b9e868ac931697484a433c9c49ad16733c98ff1.dll windows x86
f9323a952c39151ad03e7cda80365b55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExpandEnvironmentStringsA
CloseHandle
Sleep
GetTickCount
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
WaitForSingleObject
CreateProcessA
CreateFileA
WinExec
mfc42
ord540
ord800
ord665
ord5442
ord3318
ord825
ord6385
ord1979
ord5186
ord354
ord823
ord2818
ord860
ord535
ord858
ord537
ord940
ord6874
ord4204
msvcrt
strrchr
_beginthreadex
rand
srand
__CxxFrameHandler
_iob
sprintf
free
malloc
fclose
fwrite
fopen
__dllonexit
_onexit
_initterm
_adjust_fdiv
wininet
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
ws2_32
WSAStartup
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ