Static task
static1
Behavioral task
behavioral1
Sample
cb45e78720a360a40cffaccf6f604cd5ded7df6e2b6d122eebbfa3cfae2744e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb45e78720a360a40cffaccf6f604cd5ded7df6e2b6d122eebbfa3cfae2744e8.exe
Resource
win10v2004-20221111-en
General
-
Target
cb45e78720a360a40cffaccf6f604cd5ded7df6e2b6d122eebbfa3cfae2744e8
-
Size
338KB
-
MD5
611da6e71be8e58719957d03410ad051
-
SHA1
c5038eec53f6c75dfadbe59249e04356c0dc58ec
-
SHA256
cb45e78720a360a40cffaccf6f604cd5ded7df6e2b6d122eebbfa3cfae2744e8
-
SHA512
37c517890d4ded8a0d30d8446b1cc13d16acae636fb5add2893cdda7ae260285b9ed0c17c039619e270408634b81cc69f2a4567e5fcc6e23dbf38d7579a8fa0b
-
SSDEEP
6144:hnc64DCtD752cycYt4Tl9HSw4T2xmEKhDYfJE9kfIy4jNYoZooqwNgk:hcdK75tHYt4rj4TCxDfIyUjodk
Malware Config
Signatures
Files
-
cb45e78720a360a40cffaccf6f604cd5ded7df6e2b6d122eebbfa3cfae2744e8.exe windows x86
61a2adcc5c94ff7a64681d76d25a7fd9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetCommandLineA
GetTimeFormatA
HeapCreate
GetTapeStatus
CreateIoCompletionPort
WaitForSingleObject
HeapQueryInformation
GetCurrentThread
GetStdHandle
IsDebuggerPresent
GetProcessHeap
GetOEMCP
VirtualProtect
GetModuleHandleA
GlobalMemoryStatus
HeapDestroy
FindClose
InterlockedExchange
GetCurrentProcessId
GetACP
user32
ReleaseDC
SetActiveWindow
GetDlgItem
GetTitleBarInfo
FillRect
GetCursorPos
DragDetect
ShowWindow
GetWindowTextLengthA
GetParent
BeginPaint
GetClassNameA
GetFocus
EndPaint
GetWindow
wsprintfA
FrameRect
DrawTextA
SetForegroundWindow
gdi32
CreateBitmap
GetClipBox
CreatePalette
GetLayout
CloseFigure
userenv
DeleteProfileA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ