Static task
static1
Behavioral task
behavioral1
Sample
cb02bc59ba83f4033a5295ae0d7cdc42ebac19d3737f8d654aa17be9c292214d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb02bc59ba83f4033a5295ae0d7cdc42ebac19d3737f8d654aa17be9c292214d.exe
Resource
win10v2004-20220812-en
General
-
Target
cb02bc59ba83f4033a5295ae0d7cdc42ebac19d3737f8d654aa17be9c292214d
-
Size
10KB
-
MD5
fbe84674ad8143f7e9d3e8c91b565092
-
SHA1
68e1bc8e5b50c5816c209aa8c9705b2155a2d881
-
SHA256
cb02bc59ba83f4033a5295ae0d7cdc42ebac19d3737f8d654aa17be9c292214d
-
SHA512
8bc49ce265d049021ba1d6b61c5bc676debf8fa97dc8e6cbccdc90e1adc70aa863ba926e5ce150cfcbd96083e891366f0a8dcadc53962bf4a366fec2f8faa10e
-
SSDEEP
192:UgH4saCLqt/jlIGOE85Xk9VDK48Y/zCdTGLMC:dLLOIbE8x4P8Y/GdT9C
Malware Config
Signatures
Files
-
cb02bc59ba83f4033a5295ae0d7cdc42ebac19d3737f8d654aa17be9c292214d.exe windows x86
20a3eab65de5cfed2b24442f2592710b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CreateFileA
CreateThread
DuplicateHandle
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathA
GetThreadContext
LoadLibraryA
ReadFile
ResumeThread
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateThread
msvcrt
_close
_open
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
perror
signal
strcat
strlen
shell32
ShellExecuteA
StrStrA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 256B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE