?BattleModeStepAwway@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
cb3f222ff6ac27bc2d8d753ef286ae542ca6c5f8eeac2384e70982e87d7b6e48.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cb3f222ff6ac27bc2d8d753ef286ae542ca6c5f8eeac2384e70982e87d7b6e48.exe
Resource
win10v2004-20220812-en
General
-
Target
cb3f222ff6ac27bc2d8d753ef286ae542ca6c5f8eeac2384e70982e87d7b6e48
-
Size
147KB
-
MD5
30126511de0abfd39128ddba2923a137
-
SHA1
9db5110b9a93747acd9461e2cc7666362750ff06
-
SHA256
cb3f222ff6ac27bc2d8d753ef286ae542ca6c5f8eeac2384e70982e87d7b6e48
-
SHA512
ca9bb8b48151e06f2fa107ea860e70e748dc2cb7bf7dcddf0d64d630b506819c120f0813c11a8817c645b6d7aee01bee784c737aeb3f30da79c7e7f84647ba81
-
SSDEEP
3072:WTWRh+fBZxwJopQpfvgd8IZheOd5KsuF5wr4gEXKQL/dD:+WRsfBZSaQpfvrLP7wrrc7
Malware Config
Signatures
Files
-
cb3f222ff6ac27bc2d8d753ef286ae542ca6c5f8eeac2384e70982e87d7b6e48.exe windows x86
4c2659c60a42fc94b6d7f0ae05a1b71d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
VkKeyScanA
kernel32
LoadLibraryA
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rtop Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ltop Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stop Size: 1024B - Virtual size: 610B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stext Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atext Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mtext Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ