Static task
static1
Behavioral task
behavioral1
Sample
cb318873ec3cefdcaf035deb37cc8f9681d44abafcf6483580d962d8d8d94e21.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb318873ec3cefdcaf035deb37cc8f9681d44abafcf6483580d962d8d8d94e21.exe
Resource
win10v2004-20221111-en
General
-
Target
cb318873ec3cefdcaf035deb37cc8f9681d44abafcf6483580d962d8d8d94e21
-
Size
166KB
-
MD5
bb98a51f48a3604cd36e4c169e04206b
-
SHA1
a99be19a840ea5a228537f4cb6383a3142a3a852
-
SHA256
cb318873ec3cefdcaf035deb37cc8f9681d44abafcf6483580d962d8d8d94e21
-
SHA512
67004dd1b2c285591e2704a0d07fc59fe61c15438527a2376d0844a162743ccc3f30f5668228dcd7a0bb8cae095db09f011bcf5f3b1720b04e423ccb387f27c5
-
SSDEEP
3072:BxYwthzT8He+UfnVo/7BeybVaKzs3fo9Il7nWYqRVddQhO8:B70L+VolXVdzmfvrWhVS
Malware Config
Signatures
Files
-
cb318873ec3cefdcaf035deb37cc8f9681d44abafcf6483580d962d8d8d94e21.exe windows x86
e1e32be7f9160427192629357211a3d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectPalette
CreateSolidBrush
LineTo
GetPixel
SetStretchBltMode
RectVisible
GetTextMetricsA
SelectObject
GetDeviceCaps
DeleteDC
GetStockObject
CreatePalette
SetMapMode
CreatePen
CreateCompatibleDC
SaveDC
RestoreDC
GetClipBox
PatBlt
GetObjectA
DeleteObject
SetTextColor
SetTextAlign
CreateFontIndirectA
user32
GetSystemMetrics
TranslateMessage
GetDC
GetDesktopWindow
CharNextA
GetParent
kernel32
GetConsoleOutputCP
lstrcmpiA
SetCurrentDirectoryA
GlobalFindAtomA
lstrlenA
GetStartupInfoA
GetModuleHandleW
GetTickCount
GetWindowsDirectoryA
GlobalFindAtomW
GetCommandLineA
GetVersion
IsDebuggerPresent
DeleteFileA
GetCurrentProcessId
GetCurrentThread
GetOEMCP
GetThreadLocale
CopyFileA
DeleteFileW
GetDriveTypeA
VirtualAlloc
GetCurrentProcess
MulDiv
VirtualFree
RemoveDirectoryA
GetCommandLineW
lstrcmpiW
GetModuleHandleA
GetUserDefaultLangID
GetProcessHeap
lstrlenW
lstrcmpA
GetACP
QueryPerformanceCounter
GetCurrentThreadId
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Seuwqovq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ylefsduv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fkxuqrn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE