Static task
static1
Behavioral task
behavioral1
Sample
cba46cc49b2d8997b6c7a91c9393981299822ec001ca181450f8ee456ee15363.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cba46cc49b2d8997b6c7a91c9393981299822ec001ca181450f8ee456ee15363.exe
Resource
win10v2004-20221111-en
General
-
Target
cba46cc49b2d8997b6c7a91c9393981299822ec001ca181450f8ee456ee15363
-
Size
233KB
-
MD5
0aab3eec989b00da1083bc2220476a0f
-
SHA1
69b28e05b2c0cfb33b08fd7df81de2b108598a4e
-
SHA256
cba46cc49b2d8997b6c7a91c9393981299822ec001ca181450f8ee456ee15363
-
SHA512
de2c511dc0bba9d0550876ccde9e73b7ff7ccd090d07d8790662ff7ddb07eb52d734cfca1450b443bdddaa5b9ea6e803c07996d0be0f4e6d57705760d3f1adc6
-
SSDEEP
6144:bylqCiHzTOtIDki0tm9+wayMmMLt6/MXumtXs0AF:bKIzT0QDM7rLt60eJ3
Malware Config
Signatures
Files
-
cba46cc49b2d8997b6c7a91c9393981299822ec001ca181450f8ee456ee15363.exe windows x86
04f65b42a376c63ba2f9e1d0008d3f08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
iphlpapi
SetIfEntry
Sections
CODE Size: 190KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rorg Size: 28KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE