Static task
static1
Behavioral task
behavioral1
Sample
cb4e448ea00532cf549fcf45775a41869d7a7326576ef870149d6635190d382c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb4e448ea00532cf549fcf45775a41869d7a7326576ef870149d6635190d382c.exe
Resource
win10v2004-20220901-en
General
-
Target
cb4e448ea00532cf549fcf45775a41869d7a7326576ef870149d6635190d382c
-
Size
297KB
-
MD5
bbfda525cf987870a65b3bebd66004d9
-
SHA1
11cc6a09b8c969c1fb6a57cd089fa5b5213b0278
-
SHA256
cb4e448ea00532cf549fcf45775a41869d7a7326576ef870149d6635190d382c
-
SHA512
d98c2a08fa96dba79e88a5bb36e68b200b90c53733625059f56509b3c03e42bc046fd52de36d0e98ee36cb4359cc08e3185e8b438ec9522c45fe9d4223d9825a
-
SSDEEP
6144:oi98Ajo3mUkTc9AxHiBe4aac6GqnpV6NM33M+Q+quKeDH:F98ApYW6NXc6GqpVAaM+QTm
Malware Config
Signatures
Files
-
cb4e448ea00532cf549fcf45775a41869d7a7326576ef870149d6635190d382c.exe windows x86
42350b1f0c031066342a758c60cff24a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
CreateFileA
FindAtomA
LoadLibraryW
CloseHandle
CreateThread
GetExitCodeProcess
GetModuleHandleA
GetTickCount
ResetEvent
GetFileAttributesA
GetSystemTime
SuspendThread
HeapCreate
GetComputerNameA
GetDiskFreeSpaceW
GetCommandLineW
SetLastError
LocalFree
TlsGetValue
advapi32
RegQueryValueA
GetUserNameW
CredFree
IsTokenRestricted
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CloseEventLog
GetFileSecurityA
CreateServiceW
GetLengthSid
cryptui
WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ