Static task
static1
Behavioral task
behavioral1
Sample
0cafbf306b2abba8ee313d5375c7d53963e7de4e20c550fd8c5824044146f135.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0cafbf306b2abba8ee313d5375c7d53963e7de4e20c550fd8c5824044146f135.exe
Resource
win10v2004-20221111-en
General
-
Target
0cafbf306b2abba8ee313d5375c7d53963e7de4e20c550fd8c5824044146f135
-
Size
818KB
-
MD5
cd15706e75fe94bc8ce45d85c7d1f14c
-
SHA1
d3f8bc814d391993e574d7cae54df0416a4313c2
-
SHA256
0cafbf306b2abba8ee313d5375c7d53963e7de4e20c550fd8c5824044146f135
-
SHA512
83de26f3a6a4995de7c66621c3a9a66493777dd02562c7e7a46a0dfed1532d630f2abd97b0ef75b2a80d457eeb49a2c9349d81d73ed400d3398253a82d2805e0
-
SSDEEP
24576:Z5Fhafdafc4LUWnZFNf7D5d24QxQl86guxvxLqTAqK:Z5y2AWn/g7x0guxZWTAqK
Malware Config
Signatures
Files
-
0cafbf306b2abba8ee313d5375c7d53963e7de4e20c550fd8c5824044146f135.exe windows x86
b56e0852058f772b9ce64a66f38ed189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
ReleaseMutex
FormatMessageA
Beep
lstrlenW
GetModuleHandleA
DeleteFileW
TlsGetValue
Beep
GetPrivateProfileIntA
TlsSetValue
GetCurrentThreadId
Beep
Beep
Beep
SetLocaleInfoA
GetModuleFileNameW
VirtualQuery
Beep
Beep
Beep
Beep
Beep
VirtualProtect
GetFullPathNameW
SetThreadPriority
GetCommandLineA
SetCurrentDirectoryW
WriteConsoleW
blackbox
IBlackBox_CreateInstance2
IBlackBox_CreateInstance
DllMain
DllUnregisterServer
Sections
.text Size: 15KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ