Static task
static1
Behavioral task
behavioral1
Sample
cabf9472be67af4e938ca861b83f7c8d2db948afd56d2a60d4cb06c5d13a3702.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cabf9472be67af4e938ca861b83f7c8d2db948afd56d2a60d4cb06c5d13a3702.exe
Resource
win10v2004-20220812-en
General
-
Target
cabf9472be67af4e938ca861b83f7c8d2db948afd56d2a60d4cb06c5d13a3702
-
Size
24KB
-
MD5
63b12b84af8fd35b1e50fc276df5fe0a
-
SHA1
28cf5c75f57dcf0cbb8f158eefc7a5a9cbf25729
-
SHA256
cabf9472be67af4e938ca861b83f7c8d2db948afd56d2a60d4cb06c5d13a3702
-
SHA512
7eb1bf9a6503fc6058feb69551b769708e20d5d19eccef25ec474adbd08635d3998f72f2655c04b05d123436f433af3cd3b83c532102b4f1ca4921e85c89f188
-
SSDEEP
384:N8zoqIPx8p5ns3/WfvDHwZiyQg9tn7hbJQy9r9BBoTQ0ICbSCEgLKY5p:S7IypO3efrQi0xtJQG9BdJCEgLKY5p
Malware Config
Signatures
Files
-
cabf9472be67af4e938ca861b83f7c8d2db948afd56d2a60d4cb06c5d13a3702.exe windows x86
690bfab8e14f75d9b996a8e13c14e2a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
IsValidURL
CreateAsyncBindCtx
DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
IsValidURL
URLDownloadW
wsock32
htons
sethostname
WSAStartup
ioctlsocket
bind
htonl
SetServiceA
gethostbyaddr
listen
user32
CloseDesktop
DrawStateA
FlashWindow
Sections
.text Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE