Static task
static1
Behavioral task
behavioral1
Sample
cb875a88b429beb316f1eb01abed24083bb0bf576c73611b244c5b2afb9a2efb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb875a88b429beb316f1eb01abed24083bb0bf576c73611b244c5b2afb9a2efb.exe
Resource
win10v2004-20221111-en
General
-
Target
cb875a88b429beb316f1eb01abed24083bb0bf576c73611b244c5b2afb9a2efb
-
Size
171KB
-
MD5
57654c7813863c259122947d24f50113
-
SHA1
5b447596cb7067544a80ef4eb8bf676495bc94de
-
SHA256
cb875a88b429beb316f1eb01abed24083bb0bf576c73611b244c5b2afb9a2efb
-
SHA512
b259201f457caaa953a04bb829842210c04ba3191e0d85ec5298e57877a4c4d34eb311d344dfbdd102973731a77e006e6511f53d6ca845258128547efe6e6b7e
-
SSDEEP
3072:2y1Ta4T6ZVWyt+QewzwPpGwYD626XpgDgDfdv3Cyit1/SbAjIW2JUACBhy8Rhrb:2yM4T6Lt+sw/p2qdv3CyitBSbSIZvCB1
Malware Config
Signatures
Files
-
cb875a88b429beb316f1eb01abed24083bb0bf576c73611b244c5b2afb9a2efb.exe windows x86
960d6e9300f85896161a7453e37d5dcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
MultiByteToWideChar
GetACP
GetSystemTimeAsFileTime
lstrlenA
GetLocaleInfoA
InterlockedExchange
GetEnvironmentVariableA
RaiseException
lstrlenW
IsDebuggerPresent
GetCurrentProcess
LocalAlloc
EnumResourceNamesW
SetUnhandledExceptionFilter
GetCPInfoExA
GetModuleHandleA
CreateProcessA
ExitProcess
UnhandledExceptionFilter
WideCharToMultiByte
GetThreadLocale
ole32
StringFromIID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
oleacc
LresultFromObject
CreateStdAccessibleObject
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ