Static task
static1
Behavioral task
behavioral1
Sample
0b9e399274e5f35979031b7fdb2aa84694698e99ef8a4a336074a100f1fcf15d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b9e399274e5f35979031b7fdb2aa84694698e99ef8a4a336074a100f1fcf15d.exe
Resource
win10v2004-20220812-en
General
-
Target
0b9e399274e5f35979031b7fdb2aa84694698e99ef8a4a336074a100f1fcf15d
-
Size
360KB
-
MD5
03cffd542ecdda7be5e440f83b4bb93b
-
SHA1
67e156936b3e41233ea160c8cddd99510620d0f6
-
SHA256
0b9e399274e5f35979031b7fdb2aa84694698e99ef8a4a336074a100f1fcf15d
-
SHA512
b1c1a6c0da511948d92c2dc62bf70e345bb825ab33616052e16a895c1e1b9b9e3f665d875644c82808fd78945c2530ef15b86ee14610ab4305cd7c86127ead84
-
SSDEEP
6144:rWsknd0QWzHy502wQhy9BvHaNiWw2q+UB8cVy9h/39O8t77vH7y4W:yFndWHLnQkrHaNiWw21hcyj3I8t77vGn
Malware Config
Signatures
Files
-
0b9e399274e5f35979031b7fdb2aa84694698e99ef8a4a336074a100f1fcf15d.exe windows x86
7879fc98b9b3e34dfa0e6b122040dd79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetExitCodeProcess
GetCommandLineA
CloseHandle
GetTickCount
SearchPathA
SetLastError
FindClose
CreateMutexA
GetLastError
Sleep
GetModuleHandleA
VirtualProtect
GetComputerNameA
GetDriveTypeA
GetVolumeInformationA
ReleaseMutex
FreeConsole
TlsGetValue
EnumResourceTypesA
shell32
DragAcceptFiles
ShellMessageBoxA
SheChangeDirA
ShellAboutA
DragQueryPoint
SHGetNewLinkInfo
DragFinish
DragQueryFileA
SHGetDiskFreeSpaceA
SHFree
SHGetSettings
SHAlloc
SHGetMalloc
StrChrA
dmutil
DisplayError
ShowMessage
TranslateError
SzwFromSza
SzwDupSzw
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ