Static task
static1
Behavioral task
behavioral1
Sample
cbe372f4db85ec86ffb8977c22fd8e3268257f6de9f58fc3661f8f45f7007a28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbe372f4db85ec86ffb8977c22fd8e3268257f6de9f58fc3661f8f45f7007a28.exe
Resource
win10v2004-20220812-en
General
-
Target
cbe372f4db85ec86ffb8977c22fd8e3268257f6de9f58fc3661f8f45f7007a28
-
Size
11KB
-
MD5
fb55e4f0df36b5e463f749c924f2b209
-
SHA1
454a62759e0614faf9cd8cc0852a018aa98721c3
-
SHA256
cbe372f4db85ec86ffb8977c22fd8e3268257f6de9f58fc3661f8f45f7007a28
-
SHA512
9842f880e317a4c0e8dd6c7df339e228b2bd6f43923fc257b748e14da86e854e82792554d55713929a64dd1e71b4d533a28b64863782e8e11b718f3da95ab2e0
-
SSDEEP
192:j3kQb5S3pAcNoayP8sMxfEU2tJSgz9KBS24TCwDkgRSF8:jR9cjtEU2togZKA5TCwDkhO
Malware Config
Signatures
Files
-
cbe372f4db85ec86ffb8977c22fd8e3268257f6de9f58fc3661f8f45f7007a28.exe windows x86
bc8c384c99527dc2a39efa20e42d3fa2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strlen
strcpy
strcat
atoi
sprintf
strstr
_strnicmp
strncpy
strcmp
sscanf
memcpy
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
HeapAlloc
HeapDestroy
ExitProcess
InitializeCriticalSection
GetCurrentProcess
DuplicateHandle
CloseHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
HeapFree
CreateFileA
WriteFile
Sleep
GetTempPathA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLocalTime
HeapReAlloc
shell32
ShellExecuteExA
wsock32
closesocket
WSACleanup
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
ioctlsocket
send
sendto
recvfrom
recv
WSAGetLastError
Sections
.code Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 273B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ