Static task
static1
Behavioral task
behavioral1
Sample
cb339bbbb22c18a39150c2b4551ec81520917afd1109b095dcbcbfe6bac5535b.exe
Resource
win7-20220812-en
General
-
Target
cb339bbbb22c18a39150c2b4551ec81520917afd1109b095dcbcbfe6bac5535b
-
Size
156KB
-
MD5
7ae96d181901589b1b53f32f76415330
-
SHA1
d30fa3beeb2bdcfab520bcc2e9b0dcd1603a8e46
-
SHA256
cb339bbbb22c18a39150c2b4551ec81520917afd1109b095dcbcbfe6bac5535b
-
SHA512
aae66da4761230a92d552ca7172e7102bbe17cc60275a2952a997985922cefc258dd14edfc3c59a73ab3000e325fceaa284d0355616e83e4aace0099e22ac5e5
-
SSDEEP
1536:zu0L1EIAOm1yzeJm9kR1+YXRCIfpMehf3hfW6xQ70FnycVVJB:z0IVm1yzeBR1+URveeh/hf/zpycTv
Malware Config
Signatures
Files
-
cb339bbbb22c18a39150c2b4551ec81520917afd1109b095dcbcbfe6bac5535b.exe windows x86
7595193b2ed3a3af10efd9fd5768a9a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteW
SHGetFolderPathW
kernel32
GetTickCount
IsBadCodePtr
IsBadReadPtr
GetVersionExW
GetProcAddress
LoadLibraryW
GlobalFree
GlobalAlloc
SetFileAttributesW
GetFileAttributesW
GetModuleFileNameW
FreeLibrary
VirtualQuery
InterlockedExchange
LoadLibraryA
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
ExitProcess
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE