Static task
static1
Behavioral task
behavioral1
Sample
b47ba8515047c74e6601a159e8ef4204962293a35a28218d92d7ed299c78754d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b47ba8515047c74e6601a159e8ef4204962293a35a28218d92d7ed299c78754d.exe
Resource
win10v2004-20220812-en
General
-
Target
b47ba8515047c74e6601a159e8ef4204962293a35a28218d92d7ed299c78754d
-
Size
345KB
-
MD5
68845934fa55a292b2ca63a6daba0e39
-
SHA1
0ebdfdc8e6927c6cc1dc91bdb2d3a7aca0528b9f
-
SHA256
b47ba8515047c74e6601a159e8ef4204962293a35a28218d92d7ed299c78754d
-
SHA512
03312e2c9784d000c01fdf8efb07c2af4068076c1326a0c1bb2cc4113745dc07667f8274aa7c2540d112d581c2e088a7accb4200d1bca06c357784643abd71a2
-
SSDEEP
6144:iCDnv03w8f6P9UCMp8ZrZLoSSNR/hhAusJteGDPQgs6nKKWuJfrOeWwPqFFGLFZ0:iCDnv03w8CP2CMyHvIJhHsJtemG6KKb8
Malware Config
Signatures
Files
-
b47ba8515047c74e6601a159e8ef4204962293a35a28218d92d7ed299c78754d.exe windows x86
1aa0f643df1698a5363bfaddb8653836
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LCMapStringW
IsProcessorFeaturePresent
HeapFree
GetConsoleMode
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
GetModuleHandleW
MultiByteToWideChar
GetStringTypeW
ReadFile
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
HeapReAlloc
FlushFileBuffers
lstrcpyA
CloseHandle
GetModuleHandleA
CreateFileMappingA
LoadLibraryA
ExitProcess
GlobalFree
EnterCriticalSection
GetProcAddress
GetLastError
GlobalUnlock
ReleaseSemaphore
lstrlenW
lstrcatA
CreateSemaphoreA
LeaveCriticalSection
CreateEventA
Sleep
LoadLibraryW
WideCharToMultiByte
GlobalAlloc
WaitForSingleObject
MapViewOfFile
lstrcmpA
GetCommandLineW
HeapAlloc
CreateFileW
user32
CopyRect
EnableWindow
SetClipboardData
EndPaint
MapWindowPoints
IsWindowVisible
GetWindow
GetDialogBaseUnits
ClientToScreen
DestroyWindow
CloseClipboard
GetClassNameA
GetWindowRect
SendDlgItemMessageA
GetWindowDC
IsIconic
DrawTextA
LoadStringA
GetFocus
LoadBitmapA
GetParent
IsWindowEnabled
wsprintfA
GetClientRect
SendMessageA
BeginPaint
WinHelpA
GetDC
MessageBoxA
InvalidateRect
CreateWindowExA
GetClassNameW
ReleaseDC
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
ShowWindow
IsDlgButtonChecked
CreateWindowExW
DispatchMessageA
AdjustWindowRectEx
MessageBoxW
GetSystemMetrics
gdi32
MaskBlt
DeleteDC
CreateDIBSection
GetDeviceCaps
GetDIBits
BitBlt
DeleteObject
SelectObject
DPtoLP
SetMapMode
CreateCompatibleBitmap
Rectangle
GetMapMode
CreateRectRgn
CreatePen
GetObjectA
CreateSolidBrush
CreateCompatibleDC
comdlg32
FindTextA
advapi32
CloseServiceHandle
shell32
SHGetFolderPathW
CommandLineToArgvW
ole32
CoFreeUnusedLibraries
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathFileExistsW
comctl32
ImageList_Create
ImageList_GetImageInfo
ImageList_Add
ImageList_GetImageCount
setupapi
SetupDiGetClassDevsA
uxtheme
DrawThemeBackground
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ