Static task
static1
Behavioral task
behavioral1
Sample
b2b3b9900857b05b65148603ca063bbb684a53912dbf1499f561f212bd8e3e83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2b3b9900857b05b65148603ca063bbb684a53912dbf1499f561f212bd8e3e83.exe
Resource
win10v2004-20220901-en
General
-
Target
b2b3b9900857b05b65148603ca063bbb684a53912dbf1499f561f212bd8e3e83
-
Size
424KB
-
MD5
69da7bfc663efb0653ef020e17023f06
-
SHA1
3857b4b35eeeec7f3df96d5557f737be18c2e513
-
SHA256
b2b3b9900857b05b65148603ca063bbb684a53912dbf1499f561f212bd8e3e83
-
SHA512
4d09fb4c8b15a4a5af013952d100c3d9afb7c5a0fcc99bc1fda5bce0c35e1836c40c424d51c770a346cc093a11cd1f1b481055a289062546f902053e214c3924
-
SSDEEP
12288:QzHypOkQuQ8ukplnRcmHxyeIWNUuqMd1+aBdN:StkHQ8BVcyu/uq6BdN
Malware Config
Signatures
Files
-
b2b3b9900857b05b65148603ca063bbb684a53912dbf1499f561f212bd8e3e83.exe windows x86
1f2a32d634ee7efad9f83582e0e10b06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
HeapReAlloc
ReadFile
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
SetFilePointer
SetStdHandle
WriteConsoleW
GetLastError
GetStdHandle
GetConsoleScreenBufferInfo
CreateFileA
CloseHandle
WriteFile
HeapCreate
GetProcessHeap
HeapAlloc
FormatMessageA
LocalFree
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryW
CreateFileW
Sleep
LoadLibraryA
RaiseException
RtlUnwind
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleFileNameW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
user32
GetSystemMetrics
GetDlgItem
SendMessageA
BeginPaint
InsertMenuItemA
wsprintfA
EndPaint
DefWindowProcA
LoadImageA
InvalidateRect
SetRect
GetClientRect
GetClassNameW
GetWindowTextLengthA
GetWindowTextA
GetFocus
GetWindowRect
SetWindowPos
DrawFrameControl
GetDC
ReleaseDC
GetDesktopWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
SendDlgItemMessageW
gdi32
GetObjectA
SaveDC
GetDeviceCaps
CreateFontA
SelectObject
GetTextExtentPoint32A
TextOutA
DeleteObject
RestoreDC
SetTextColor
CreateCompatibleDC
BitBlt
DeleteDC
CreatePalette
CreateBitmapIndirect
CreateCompatibleBitmap
GetStockObject
MoveToEx
LineTo
Rectangle
CreatePen
advapi32
QueryAllTracesA
ws2_32
inet_addr
version
GetFileVersionInfoW
iphlpapi
GetAdaptersInfo
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 221KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ