Static task
static1
Behavioral task
behavioral1
Sample
cbc88bf0e0701aa080a70efa795e6507f3fd061a71446c53ea0649ce3db782d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbc88bf0e0701aa080a70efa795e6507f3fd061a71446c53ea0649ce3db782d8.exe
Resource
win10v2004-20221111-en
General
-
Target
cbc88bf0e0701aa080a70efa795e6507f3fd061a71446c53ea0649ce3db782d8
-
Size
148KB
-
MD5
aff2a4864477402efdad68bbd181e3b5
-
SHA1
75eaaae9c3d8d0b8664746f6705ff1af1fecf24f
-
SHA256
cbc88bf0e0701aa080a70efa795e6507f3fd061a71446c53ea0649ce3db782d8
-
SHA512
19a9c3eb791b3056d8f6d71de3feb40dc4adb033d21a7e103639047c094b4bdfd99125681bd05cf9ab894d5113ad3b244e59b0101f546e0bcc60919b72ad37b2
-
SSDEEP
3072:LCQQk9vEiqnU8oL44TOX5kCwcFh4CGjaZazY8ofmAG99sA/w74lxyQ:LJB4U8SZ6FFZGjaCLoOAG99sAEax
Malware Config
Signatures
Files
-
cbc88bf0e0701aa080a70efa795e6507f3fd061a71446c53ea0649ce3db782d8.exe windows x86
2dbd408b66cec399664cedd7eac988de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GetSystemDirectoryA
InterlockedExchange
CloseHandle
RaiseException
ReleaseMutex
HeapCreate
GetLogicalDrives
GetLocaleInfoA
Sleep
GetACP
VirtualProtect
GetCommandLineA
FindFirstFileA
GetLastError
GetStdHandle
EnterCriticalSection
SetEvent
ResetEvent
SetErrorMode
LoadLibraryExA
user32
GetFocus
IsIconic
GetParent
FillRect
EndPaint
ShowWindow
GetCursorPos
ReleaseDC
GetActiveWindow
GetWindow
FrameRect
GetWindowTextA
ValidateRect
FlashWindowEx
SetForegroundWindow
wsprintfA
BeginPaint
GetClassNameA
DrawTextA
httpapi
HttpInitialize
HttpAddUrl
HttpTerminate
HttpCreateHttpHandle
HttpAddFragmentToCache
winhttp
WinHttpOpen
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ