Static task
static1
Behavioral task
behavioral1
Sample
cbab48e9223379bb5a81053d1778f2a21d8334e02b68650715c2ca6ede370df4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbab48e9223379bb5a81053d1778f2a21d8334e02b68650715c2ca6ede370df4.exe
Resource
win10v2004-20220812-en
General
-
Target
cbab48e9223379bb5a81053d1778f2a21d8334e02b68650715c2ca6ede370df4
-
Size
112KB
-
MD5
018a3d7a08daf2f3433c2a7fb7347070
-
SHA1
78458ad3076bc56a84e5c63aaac7985481593a5d
-
SHA256
cbab48e9223379bb5a81053d1778f2a21d8334e02b68650715c2ca6ede370df4
-
SHA512
b14024b301c6fa85b7ac81f09e90dac9d3811398b1709a4225046709cdc7a9e668d5671c22b68bcace93a6bc01b88884f5794bc7f92a406bbe055aa120e9bfd0
-
SSDEEP
1536:EDTuCcqOexbCXmR/lFCDk84clk4KojdRdHF9HeYonS5tPIswTOJcgp+VbVXJMm:WSCtDk+/qg8nBKkBHT+whQvdNJn
Malware Config
Signatures
Files
-
cbab48e9223379bb5a81053d1778f2a21d8334e02b68650715c2ca6ede370df4.exe windows x86
469b51f525194063fba726be56357170
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCommandLineA
GetPriorityClass
GetEnvironmentStrings
VirtualAlloc
GetVersionExA
GetEnvironmentStringsW
CreateMutexA
CreateSemaphoreA
GetStdHandle
GetTickCount
GetCurrentProcessId
CreateEventA
GetProcAddress
GetModuleHandleA
GetCommandLineW
GetStartupInfoA
user32
LoadIconA
LoadCursorA
LoadCursorFromFileA
GetWindowDC
SetWindowTextA
ReleaseDC
msi
ord143
msvcrt
__getmainargs
_except_handler3
__set_app_type
__p__fmode
__p__commode
_onexit
__dllonexit
memcpy
_exit
_XcptFilter
exit
_acmdln
_adjust_fdiv
_initterm
__setusermatherr
_controlfp
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ