Static task
static1
Behavioral task
behavioral1
Sample
cb9df341863b9efa40f1b253a45e7b290fecf858b7c86e42f6775d2d3810d5b2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb9df341863b9efa40f1b253a45e7b290fecf858b7c86e42f6775d2d3810d5b2.exe
Resource
win10v2004-20220901-en
General
-
Target
cb9df341863b9efa40f1b253a45e7b290fecf858b7c86e42f6775d2d3810d5b2
-
Size
33KB
-
MD5
011f9112ec57f976c7b3988176f51530
-
SHA1
2eccb8865cd72be125ed1c26b6c238045a7c0ba7
-
SHA256
cb9df341863b9efa40f1b253a45e7b290fecf858b7c86e42f6775d2d3810d5b2
-
SHA512
f8bf555bfb2f095002a69b2aa8974f2c578256c41cf78c03321c0fd8d19737760ded375f58f69ab2c05893db40af1656f12cc8b8e0eb6f8531dc5c2556f67eed
-
SSDEEP
384:gWkYkbXboSXC7NqMZh/gq6nQGq/iWfiemn+fRqcsfgRvMr+D2w8lDn/fAD5I7P:RJIsh/gq6BCvR5Zq7gRvfD2lbb7
Malware Config
Signatures
Files
-
cb9df341863b9efa40f1b253a45e7b290fecf858b7c86e42f6775d2d3810d5b2.exe windows x86
4004a785f85d37828612e8bf82eefa08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateEventA
CreateMutexA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
SetEvent
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
lstrcpynA
msvcrt
__getmainargs
__mb_cur_max
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_beginthreadex
_cexit
_endthreadex
_iob
_isctype
_itoa
_onexit
_pctype
_setmode
_strcmpi
_strdup
_stricmp
_strnicmp
abort
atexit
atoi
calloc
exit
free
fwrite
malloc
memcpy
rand
signal
srand
sscanf
strchr
strcpy
strncmp
strncpy
strstr
strtok
vfprintf
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE