Static task
static1
Behavioral task
behavioral1
Sample
cb4c2f15cf85b736f8ef8f838207f6d48cd24f32a5baa56cea611b5d266181ac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb4c2f15cf85b736f8ef8f838207f6d48cd24f32a5baa56cea611b5d266181ac.exe
Resource
win10v2004-20220901-en
General
-
Target
cb4c2f15cf85b736f8ef8f838207f6d48cd24f32a5baa56cea611b5d266181ac
-
Size
31KB
-
MD5
af7829d30f37ab615a1ef68b4ed3f9f5
-
SHA1
d77b85716c03632fdcdf963e4f6f083677adc558
-
SHA256
cb4c2f15cf85b736f8ef8f838207f6d48cd24f32a5baa56cea611b5d266181ac
-
SHA512
875b6ffddbb642a3b993ad74039f029e9c0324acbcb4b113672f0fb07ac4496f322570efbcf99a4ae109eccf8e011a019557e532a0a46db1b187f24419c7e48e
-
SSDEEP
768:vHT8/puNNk8imJkS+lOPLTI5dDn0dH5tEQQu7:vHOz8iuFgODuDY5Ie
Malware Config
Signatures
Files
-
cb4c2f15cf85b736f8ef8f838207f6d48cd24f32a5baa56cea611b5d266181ac.exe windows x86
0afbb94b81e19eed4b997338204cd9f9
Code Sign
21:22:1b:de:69:59:4d:68:b6:2f:26:73:32:71:01:9cCertificate
IssuerCN=EwaqoawewirNot Before31/12/2010, 21:00Not After31/12/2039, 23:59SubjectCN=Ewaqoawewir75:1c:dd:72:28:fc:e9:6c:50:2a:c8:5f:49:df:10:cb:91:9f:bb:26Signer
Actual PE Digest75:1c:dd:72:28:fc:e9:6c:50:2a:c8:5f:49:df:10:cb:91:9f:bb:26Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Ewaqoawewir01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
ShowWindow
SetTimer
PostQuitMessage
KillTimer
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
gdi32
CreateCompatibleDC
kernel32
GetModuleHandleA
GetCurrentThreadId
GetProcAddress
CreateThread
GetVersion
LoadLibraryA
Sleep
VirtualFree
GetCommandLineA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 742B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 865B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE