Static task
static1
Behavioral task
behavioral1
Sample
c2851eed7ab20a309c8868b7a05cf10601bb4f063c8585c1e6c85406a0b5cbae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c2851eed7ab20a309c8868b7a05cf10601bb4f063c8585c1e6c85406a0b5cbae.exe
Resource
win10v2004-20221111-en
General
-
Target
c2851eed7ab20a309c8868b7a05cf10601bb4f063c8585c1e6c85406a0b5cbae
-
Size
498KB
-
MD5
71705a88ecccbd4c59b8f6345764b007
-
SHA1
b5d6551561a655b35c3c7cc1f80a8502f77d1433
-
SHA256
c2851eed7ab20a309c8868b7a05cf10601bb4f063c8585c1e6c85406a0b5cbae
-
SHA512
0947731e327dbadc09171a714da45cca760353f401c64fa9dd03eb8794a7f7c47b516e5c5bf97a4c51dbc13f480bde4888e67c8fc9edefc4d3ecd37d84fda019
-
SSDEEP
6144:1pKhKBgqJMYucH+Sv2UDn+C0jj3+VAurnVv4Ch9s7cae6ZaKSqeABLs1SWcDDDDX:1whqgqJMaHp27j34GCfs7cafE
Malware Config
Signatures
Files
-
c2851eed7ab20a309c8868b7a05cf10601bb4f063c8585c1e6c85406a0b5cbae.exe windows x86
524ac218103274a9f749f260a7927c84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetModuleHandleA
TlsGetValue
GetCommandLineA
Sleep
IsDebuggerPresent
TlsAlloc
ReleaseMutex
GetModuleFileNameW
DeleteFileA
PulseEvent
SuspendThread
lstrlenA
GetFileAttributesA
HeapCreate
IsBadStringPtrW
GetStartupInfoA
CreateFileMappingA
DeviceIoControl
GetDriveTypeA
user32
DispatchMessageA
FindWindowW
IsZoomed
GetIconInfo
GetWindowLongA
CallWindowProcW
DrawTextW
PeekMessageA
LoadImageA
DestroyMenu
DispatchMessageA
DestroyWindow
IsWindow
colbact
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
cryptui
CryptUIDlgCertMgr
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ