Static task
static1
Behavioral task
behavioral1
Sample
cbd6ffa3ba07543794ee0db894607b72755695563591365160b3d1ff15c132be.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbd6ffa3ba07543794ee0db894607b72755695563591365160b3d1ff15c132be.exe
Resource
win10v2004-20220812-en
General
-
Target
cbd6ffa3ba07543794ee0db894607b72755695563591365160b3d1ff15c132be
-
Size
144KB
-
MD5
d6dbd2eb5e6aafd53e3d68dd03d164a0
-
SHA1
f8a42a8b094f2d2c587debe55eb0f3e7d827ed57
-
SHA256
cbd6ffa3ba07543794ee0db894607b72755695563591365160b3d1ff15c132be
-
SHA512
ddf97893f30be05b32ae2fc74009a7c0002c6fa8e04463e49ae99d8a01266170814ff112f7109ef8d0939aa5184bb3b1aa641a9a01b66c346b2f4e71a71b0d81
-
SSDEEP
768:1UfOSC31fPfeA994tg9BXh9M7plW1R1w0EPHu7b6t+I/Wu/ql7Yl4we69lSploTx:4EfOAf4+0CbEPHZ/W/n69cEIBIv
Malware Config
Signatures
Files
-
cbd6ffa3ba07543794ee0db894607b72755695563591365160b3d1ff15c132be.exe windows x86
1cc15b35e3872421f31ace5b74212669
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
AddAtomA
CloseHandle
CopyFileA
CreateMutexA
CreateThread
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTime
GetWindowsDirectoryA
InterlockedIncrement
LoadLibraryA
ReleaseMutex
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fprintf
free
fwrite
malloc
memcpy
memset
printf
rand
realloc
signal
srand
strcat
strcmp
strcpy
strlen
strncpy
strtol
strtoul
user32
MessageBoxA
Sections
�l�4�'2 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�4�'2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�4�'2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�4�'2 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�4�'2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�4�'2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�4�'2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE