Static task
static1
Behavioral task
behavioral1
Sample
b2b_2022-03-20_00-04.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
b2b_2022-03-20_00-04.exe
Resource
win10v2004-20220310-en
General
-
Target
b2b_2022-03-20_00-04.exe
-
Size
298KB
-
MD5
773c9670c70dd5c465ad8e57a39ae55a
-
SHA1
dc117d5ecfdea361e0c31568c3a78714461ad02b
-
SHA256
e6ccc7cc7154361faaf1994b3395a27bb0b8a97f002e28bcdba5e9901793bb00
-
SHA512
265e1d19da3f1a13a25fc2dd6a12cfff484520e1228517d57dfb9cb4ff171bc4d4f986321eba619dbbb77019c714daf1b6bcd7c9dc921ddcee86ef0b25aa2dac
Malware Config
Signatures
Files
-
b2b_2022-03-20_00-04.exe.exe windows x86
6bd64b13624a27b70b577055bad87689
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
FileTimeToSystemTime
EnumResourceTypesW
EnumResourceNamesW
FillConsoleOutputCharacterW
GetTimeZoneInformation
TerminateProcess
SetLastError
SetEvent
FindNextFileA
GetCompressedFileSizeW
CopyFileExW
BuildCommDCBAndTimeoutsW
QueryDepthSList
GetVersionExW
VerifyVersionInfoW
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
VerLanguageNameA
EscapeCommFunction
WritePrivateProfileStructW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeMountPointW
GetWriteWatch
WriteConsoleInputA
SetComputerNameExW
FindAtomA
GlobalDeleteAtom
SetThreadPriority
CallNamedPipeW
GetDriveTypeW
BuildCommDCBAndTimeoutsA
VirtualProtect
LoadLibraryW
LocalAlloc
InterlockedDecrement
FindFirstChangeNotificationA
VerifyVersionInfoA
FormatMessageW
SetDllDirectoryW
GetModuleHandleA
WritePrivateProfileStringA
GetUserDefaultLangID
GlobalUnfix
GetStartupInfoW
GetSystemWow64DirectoryW
CopyFileA
GetLastError
DebugBreak
SetConsoleCursorInfo
SetCalendarInfoA
SetConsoleScreenBufferSize
ContinueDebugEvent
InterlockedExchangeAdd
GetSystemWindowsDirectoryW
GetACP
FindNextVolumeW
CreateActCtxA
GetConsoleAliasW
OutputDebugStringW
EnumResourceTypesA
lstrlenA
WriteConsoleW
DeleteCriticalSection
GlobalWire
FreeEnvironmentStringsW
ConvertFiberToThread
lstrcatA
EnumCalendarInfoA
SetThreadAffinityMask
LockFile
RaiseException
VerSetConditionMask
GetConsoleCP
GetProfileStringA
CreateIoCompletionPort
AllocConsole
GlobalGetAtomNameA
SetComputerNameA
GetConsoleAliasExesLengthW
WriteConsoleInputW
CreateMailslotW
GetCommState
MoveFileWithProgressA
GetSystemTimeAdjustment
_hread
_lopen
EnumSystemLocalesW
GetConsoleAliasExesLengthA
MoveFileA
ResetWriteWatch
EnumDateFormatsW
DeleteAtom
GetSystemWindowsDirectoryA
GetComputerNameW
GetConsoleAliasesLengthA
FindFirstVolumeW
CancelDeviceWakeupRequest
AreFileApisANSI
OpenWaitableTimerA
OpenFileMappingA
SetProcessAffinityMask
GetConsoleAliasesLengthW
SetProcessShutdownParameters
FindNextVolumeMountPointA
ReadConsoleW
WriteConsoleOutputCharacterA
GetNumberFormatA
GetConsoleAliasExesA
GetBinaryTypeA
GetCurrentActCtx
WriteProfileSectionA
SetLocaleInfoA
GetPrivateProfileStringW
LoadLibraryA
GetModuleHandleW
Sleep
InterlockedIncrement
GetProcAddress
ExitProcess
DeleteFileA
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleFileNameA
WriteFile
GetStdHandle
GetOEMCP
GetCPInfo
IsValidCodePage
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
user32
CharToOemBuffA
GetListBoxInfo
gdi32
GetCharWidth32A
advapi32
ImpersonateSelf
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ