Static task
static1
Behavioral task
behavioral1
Sample
b964bfab8bba28729446ab61183bf8b358498bc2cbaa79e58ceedd752fe454d7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b964bfab8bba28729446ab61183bf8b358498bc2cbaa79e58ceedd752fe454d7.exe
Resource
win10v2004-20220901-en
General
-
Target
b964bfab8bba28729446ab61183bf8b358498bc2cbaa79e58ceedd752fe454d7
-
Size
1023KB
-
MD5
ca87b2a660c0793aa45ee44f4bba6131
-
SHA1
05871fc4097bbd0331eccc74f97426ec340910f3
-
SHA256
b964bfab8bba28729446ab61183bf8b358498bc2cbaa79e58ceedd752fe454d7
-
SHA512
be11242bcb338f6b10aeb03d12d3358c777b56d6660dd5efd06c723a0d3e5c410b5eca56eeb9bbbffa59d1bedb3911d1af556052dea5906ab02c6369c45b240e
-
SSDEEP
24576:9s0xHvb+foj/mmtaj7PbrNg9G0Svah3a/FSz:9s0xPb+foavHPsak3a/Q
Malware Config
Signatures
Files
-
b964bfab8bba28729446ab61183bf8b358498bc2cbaa79e58ceedd752fe454d7.exe windows x86
49eaeca842bd8f6b4fec3eeb7cda6d63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetVersionExA
GlobalFree
GetModuleHandleA
Sleep
GetStartupInfoA
user32
ShowWindow
DispatchMessageA
PostQuitMessage
DestroyWindow
BeginPaint
MessageBoxA
SetWindowTextA
CreateWindowExA
EndDialog
EndPaint
DefWindowProcA
GetMessageA
GetSysColor
msvcrt
__set_app_type
_controlfp
__p__commode
exit
toupper
__p__fmode
wcslen
_except_handler3
rand
wcschr
__getmainargs
_XcptFilter
_adjust_fdiv
_c_exit
_exit
wcstoul
memmove
_initterm
__setusermatherr
_acmdln
gdi32
GetDeviceCaps
SetBkMode
DeleteObject
LineTo
GetObjectA
BitBlt
CreateFontIndirectA
Sections
.text Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1016KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ