Static task
static1
Behavioral task
behavioral1
Sample
cb6111f7c317fe345a6b001fb6b106806e4d52331ba75a18163ba348de12c32b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb6111f7c317fe345a6b001fb6b106806e4d52331ba75a18163ba348de12c32b.exe
Resource
win10v2004-20220812-en
General
-
Target
cb6111f7c317fe345a6b001fb6b106806e4d52331ba75a18163ba348de12c32b
-
Size
279KB
-
MD5
c51d2988e98d10754a26d2cca1dd8e45
-
SHA1
15df818de46d8b1c1a215e4185b6b6363111b834
-
SHA256
cb6111f7c317fe345a6b001fb6b106806e4d52331ba75a18163ba348de12c32b
-
SHA512
5d6366f1cb2799ddf61bc43ff487b9b888065e559ee9224a30e0f800d77bb4ea4a40e95e81a6fb10ebafcee04c4a08267781f409f32ab62045dc5a9e5ff0b9f1
-
SSDEEP
6144:MXjjGv5YYlbb087oYB3rWTjfc39jnSpvym:MTyv59Nb08XNr8jMjc
Malware Config
Signatures
Files
-
cb6111f7c317fe345a6b001fb6b106806e4d52331ba75a18163ba348de12c32b.exe windows x86
e6bb628ec5951d8ccef5e9494d68c685
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
StrStrA
StrChrIA
kernel32
GetTickCount
WriteFile
Sleep
lstrlenA
lstrcpyA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
SizeofResource
GetVersion
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
lstrcatA
urlmon
CoInternetCompareUrl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 802B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE