Static task
static1
Behavioral task
behavioral1
Sample
cb6f24bad667c91a093cb70c840bd99c9d2c04bd67ee5f02e0c588f93af16636.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb6f24bad667c91a093cb70c840bd99c9d2c04bd67ee5f02e0c588f93af16636.exe
Resource
win10v2004-20221111-en
General
-
Target
cb6f24bad667c91a093cb70c840bd99c9d2c04bd67ee5f02e0c588f93af16636
-
Size
45KB
-
MD5
b020d8398a9918e779b2b728e32b8a16
-
SHA1
37d77a00c0a0471082251cce60e59d7d698440d7
-
SHA256
cb6f24bad667c91a093cb70c840bd99c9d2c04bd67ee5f02e0c588f93af16636
-
SHA512
bee78260821810225860d4ffe170400c448065fafdb08fe83f726330c7050b69797589b2888c64e967582492997aae52f5ecccc3f1f57f0dd4f134ed80491631
-
SSDEEP
768:ywTukTPTBKhmGjam9HczJqoBRV+CsGlsdnBqhmef1hXLssk4fBf0YU7sw8XW:yKNTPmTczJZbXPsdVI1lLh1YsI
Malware Config
Signatures
Files
-
cb6f24bad667c91a093cb70c840bd99c9d2c04bd67ee5f02e0c588f93af16636.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE