Static task
static1
Behavioral task
behavioral1
Sample
cb40f494494dab808a9f2097d24d83371490cdd91d11dd95305c35a3cad3e3dc.exe
Resource
win7-20221111-en
General
-
Target
cb40f494494dab808a9f2097d24d83371490cdd91d11dd95305c35a3cad3e3dc
-
Size
280KB
-
MD5
6e2fbbf01faf883cf3da8dabce089cc8
-
SHA1
ac43f49433ef465c605727f27891bc7b4fdc78c6
-
SHA256
cb40f494494dab808a9f2097d24d83371490cdd91d11dd95305c35a3cad3e3dc
-
SHA512
763b9c43dd171ff58e0b2eae8e2e8647ec83a2e0d497f1c9b729f998dd23dcb4c43233e104ee66b06b525dcd6013c7dfc322c984706aa72d53d74047c3e9c44d
-
SSDEEP
6144:pzTw54haSl2DmvdnHheKh3BRMq6jEyRJY8IiZ+BfQQqx:VO40opvdnHb6jEQ28wQQqx
Malware Config
Signatures
Files
-
cb40f494494dab808a9f2097d24d83371490cdd91d11dd95305c35a3cad3e3dc.exe windows x86
41507753530d76bf751bd1509806ec8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
Sections
CODE Size: 269KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE