Static task
static1
Behavioral task
behavioral1
Sample
b20fa6e0c5082182e379b3e1e84298fdc3d580ca4bfc29a4dfc90833227ebd04.exe
Resource
win7-20220715-en
General
-
Target
b20fa6e0c5082182e379b3e1e84298fdc3d580ca4bfc29a4dfc90833227ebd04
-
Size
268KB
-
MD5
d45995955d4daa70aca8cd90cc44b836
-
SHA1
f8a110db571ae02c02ea709a133c34ab16f7be44
-
SHA256
b20fa6e0c5082182e379b3e1e84298fdc3d580ca4bfc29a4dfc90833227ebd04
-
SHA512
53d3bd30adcb3eda4b0f6f3f38dbd6951b1bbcf7bc7cfe6ba23886687d215c529542dbcdfab44828d46b29b65b0ba45f9cce3ffe37c35fe60875648d800f0bd7
-
SSDEEP
6144:P6e7XzLHzPsoE0YMwZtxNJFBiuqVSeK3r/OLvDncwLixVYHLLKqEkf+ujXe02imC:P6e7XzLHzPsoE0YMwZtxNJFBiuqVSeKg
Malware Config
Signatures
Files
-
b20fa6e0c5082182e379b3e1e84298fdc3d580ca4bfc29a4dfc90833227ebd04.exe windows x86
717c11a036b1bead760df31a4d9c586b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoW
ReadFile
SetStdHandle
IsValidCodePage
IsValidLocale
GetUserDefaultLCID
CloseHandle
SetFilePointer
FlushFileBuffers
RaiseException
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
EnumSystemLocalesA
GetModuleFileNameW
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
user32
LoadIconA
LoadCursorA
RegisterClassA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
GetSystemMenu
AppendMenuA
CreateWindowExA
ShowWindow
DefWindowProcA
GetDlgItemTextA
SetWindowTextA
FindWindowA
DialogBoxParamA
DestroyWindow
SetDlgItemTextA
gdi32
GetStockObject
advapi32
SetFileSecurityW
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ