Static task
static1
Behavioral task
behavioral1
Sample
cabed32cbfa352f852b88c6a0d404e25da87ba3d6ef9f447f11249c105d8da4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cabed32cbfa352f852b88c6a0d404e25da87ba3d6ef9f447f11249c105d8da4b.exe
Resource
win10v2004-20221111-en
General
-
Target
cabed32cbfa352f852b88c6a0d404e25da87ba3d6ef9f447f11249c105d8da4b
-
Size
871KB
-
MD5
02645ca7e8532a24130d4900c8c76131
-
SHA1
f6efdb7cbfc67664bbbfc9984256e8e9134f00b6
-
SHA256
cabed32cbfa352f852b88c6a0d404e25da87ba3d6ef9f447f11249c105d8da4b
-
SHA512
c28592013455c841f6fb6324e4e25dce431b49d0363f33e57502eec703822ba994f102386a34e905c9d98b0d5d08c992196d19e93a30cf4fb3fcbc1085c2db26
-
SSDEEP
12288:7mCE9S+0P2Z8xg1icw1kQlHogxrKXeS5G5Yo5Fqzyt3P0sZm7eWYDw9JW:7mXAPNa1JikQlHTpTSM5KzY8OmqWIw
Malware Config
Signatures
Files
-
cabed32cbfa352f852b88c6a0d404e25da87ba3d6ef9f447f11249c105d8da4b.exe windows x86
ed3386086ebf706a9513bf2e0624af52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetStartupInfoA
IsBadCodePtr
GetModuleFileNameA
SetEvent
HeapDestroy
CreateFileA
lstrlenA
GetACP
HeapCreate
GetStdHandle
GetEnvironmentVariableA
ReleaseMutex
CancelIo
SetLastError
GetModuleHandleA
ResetEvent
GetCommandLineW
CreateFileMappingA
TlsAlloc
advapi32
IsValidSecurityDescriptor
IsTextUnicode
RegCreateKeyExW
IsValidSid
RegQueryValueW
InitializeSid
ControlService
ClearEventLogW
CreateProcessAsUserA
IsValidAcl
CreateServiceW
RegEnumKeyA
RegDeleteValueA
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 862KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ