Static task
static1
Behavioral task
behavioral1
Sample
cb47694cba6c4f8f5fdbaab5bab00d45971d8eaec4d75bd48ebf5cacd3c28d39.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb47694cba6c4f8f5fdbaab5bab00d45971d8eaec4d75bd48ebf5cacd3c28d39.exe
Resource
win10v2004-20221111-en
General
-
Target
cb47694cba6c4f8f5fdbaab5bab00d45971d8eaec4d75bd48ebf5cacd3c28d39
-
Size
164KB
-
MD5
e044d2119a9c7fec2450224490ff9287
-
SHA1
74b7507ad108423428026d85a64b8fbd030a9f0b
-
SHA256
cb47694cba6c4f8f5fdbaab5bab00d45971d8eaec4d75bd48ebf5cacd3c28d39
-
SHA512
caa2b241d8fcecccc8b819435db7e087227df993d2ad52e833ab1dd4f84bbc8200fac0b5d65c163e2d25597b450cf4f151fbbd3c1f08a6af9058f5e1985711cc
-
SSDEEP
1536:5DVXOG1XAwlDfqwwnF0F872PKJE7sxhwe6pkg5dGyVdCWX+kpoKNOrlB+GKxLF91:59hJl7PFEJE7ssXpkg7V0mzpo+GiF9G
Malware Config
Signatures
Files
-
cb47694cba6c4f8f5fdbaab5bab00d45971d8eaec4d75bd48ebf5cacd3c28d39.exe windows x86
9b7968383001989d2fb1de62c01ee551
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgExA
ChooseColorA
CommDlgExtendedError
GetFileTitleA
kernel32
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetLastError
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
FlushFileBuffers
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE