Static task
static1
Behavioral task
behavioral1
Sample
cb50d5354d0837676483b10dc11b8cfd9c28dea2804c1675341bd20eba3a9472.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb50d5354d0837676483b10dc11b8cfd9c28dea2804c1675341bd20eba3a9472.exe
Resource
win10v2004-20221111-en
General
-
Target
cb50d5354d0837676483b10dc11b8cfd9c28dea2804c1675341bd20eba3a9472
-
Size
81KB
-
MD5
ef0e826c2ec390524aa5cfca74b0c41a
-
SHA1
6087b82778df8b812b098692e9090cc871127632
-
SHA256
cb50d5354d0837676483b10dc11b8cfd9c28dea2804c1675341bd20eba3a9472
-
SHA512
f46aae7b45069842a86e57b7067bd169bc410c1c1f64b5db28ad1cd850975af99e1b1b667b6b0eb6f96218ef0f30beaddf551fa23c51c279b79f37911b230aa9
-
SSDEEP
1536:ehLaziqi5l5DThsCB7Bv2WwDe4aTq3isQT8jNzl7xMh:ehLtP5l5DlvB7Bv0a05l7xMh
Malware Config
Signatures
Files
-
cb50d5354d0837676483b10dc11b8cfd9c28dea2804c1675341bd20eba3a9472.exe windows x86
9d412cc7326d0752bfaad98c5afcd6a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
CreateFileA
CreateSemaphoreA
VirtualProtect
GetCurrentProcess
VirtualAlloc
VirtualFree
LocalFree
LockResource
LocalAlloc
LoadResource
FindResourceA
VirtualAllocEx
CreateEventA
SetEvent
ExitProcess
GetModuleHandleA
Sleep
DeleteFileA
WaitForSingleObject
user32
SendMessageA
FindWindowA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ