Static task
static1
Behavioral task
behavioral1
Sample
cabron.exe
Resource
win7-20220812-en
General
-
Target
cabron.exe
-
Size
298.5MB
-
MD5
6179c25551834ebe28cb9d5f78178f7d
-
SHA1
001a92ba60626aba9f6002235b8021f46823250a
-
SHA256
3b4a77f1b19e5412fa7bd8efbb8834cbfb3df73317373a427d5611d1046e711a
-
SHA512
33cc94889be4cc4f33e207fcbcf731069a37852c0bdce31998fcdc77160d0e7acff52fb50d7b63f96435f80b887e7f0afb810a9910a918c0e1b069a583a2890b
-
SSDEEP
12288:DuJKbYlsxvNZS+Ie2cLjsh72K7yuQZbGyS:DuJYQHlepY2GyhS
Malware Config
Signatures
Files
-
cabron.exe.exe windows x86
e7ba38693fd80b98ce6745c461019f8d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
GetModuleHandleW
GetProcAddress
LoadResource
SizeofResource
LoadLibraryA
FindResourceA
GetModuleHandleExW
GetLocaleInfoEx
LCIDToLocaleName
FreeLibrary
GetThreadTimes
InitializeSListHead
GetCurrentProcessId
TerminateProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
ResetEvent
SetEvent
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
CreateEventW
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
Sleep
WaitForSingleObjectEx
CloseHandle
QueryPerformanceCounter
WideCharToMultiByte
msvcrt
_acmdln
?_set_new_mode@@YAHH@Z
_isatty
_fileno
__set_app_type
_XcptFilter
_msize
__getmainargs
?terminate@@YAXXZ
realloc
_iob
___lc_handle_func
_unlock
_lock
strcpy_s
_controlfp_s
__p__commode
_set_fmode
_initterm_e
_initterm
_callnewh
_ismbblead
calloc
__strncnt
ungetc
setvbuf
_fseeki64
fsetpos
fgetpos
fgetc
fflush
fclose
_errno
abort
malloc
islower
___lc_codepage_func
_wcsdup
isupper
__pctype_func
rand
free
_amsg_exit
_except_handler4_common
__uncaught_exception
memset
memcpy
__CxxFrameHandler3
_CxxThrowException
strchr
wcsrchr
memmove
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 594KB - Virtual size: 594KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ