Static task
static1
Behavioral task
behavioral1
Sample
cb275998c8376e8944e74b966e37c44ed0f13775ca34f0144af77d7a1d945e3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb275998c8376e8944e74b966e37c44ed0f13775ca34f0144af77d7a1d945e3b.exe
Resource
win10v2004-20220901-en
General
-
Target
cb275998c8376e8944e74b966e37c44ed0f13775ca34f0144af77d7a1d945e3b
-
Size
236KB
-
MD5
40e782ea64a78e11764d6e9f0c9e08b3
-
SHA1
6cf6024b30a8552cdcdc4ebcf8fdae5c4f42d77a
-
SHA256
cb275998c8376e8944e74b966e37c44ed0f13775ca34f0144af77d7a1d945e3b
-
SHA512
42c99c8c7caec7aa0db83101136d9681a8f6382a464151e2fcadd9b94c46ae5f1150259a68e20380d1a7c24a6696fdf0f6ca5ed3521ffe3c9173030e99bf612d
-
SSDEEP
6144:2nfzTwEO1T4b7IZieD9+hlAQDC5Bpvp1T:2nPwECTpDyXDCVp1
Malware Config
Signatures
Files
-
cb275998c8376e8944e74b966e37c44ed0f13775ca34f0144af77d7a1d945e3b.exe windows x86
ecdbab79005e0c7f3064f7f92cbe95a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_acmdln
fabs
strcmp
exit
srand
memcpy
sqrt
advapi32
RegQueryValueA
kernel32
LoadLibraryExA
DeleteCriticalSection
GetOEMCP
ExitProcess
GetLastError
GetStringTypeA
GetLocalTime
VirtualAlloc
GetProcAddress
VirtualAllocEx
ExitThread
GetModuleHandleA
lstrlenA
GetCommandLineW
LoadLibraryA
FindResourceA
LocalAlloc
GetCommandLineA
GetTickCount
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA
gdi32
SetBkMode
SelectObject
CreateFontIndirectA
GetObjectA
RestoreDC
LineTo
CreateBrushIndirect
user32
LoadIconA
EnableMenuItem
DrawAnimatedRects
GetDCEx
IsWindowUnicode
GetMenuStringA
GetMenu
SetClassLongA
TranslateMessage
GetActiveWindow
ReleaseCapture
CharToOemA
DrawFrameControl
OffsetRect
SetCursor
SetFocus
GetWindowTextA
ShowScrollBar
BeginPaint
CheckMenuItem
SetParent
GetCursor
TranslateMDISysAccel
GetSysColorBrush
GetWindowLongA
GetIconInfo
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 591B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ