Static task
static1
Behavioral task
behavioral1
Sample
b905ae02cb1095347e0d335aa2588a2847eed774cc44949f06ff8a11073ff8b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b905ae02cb1095347e0d335aa2588a2847eed774cc44949f06ff8a11073ff8b0.exe
Resource
win10v2004-20220901-en
General
-
Target
b905ae02cb1095347e0d335aa2588a2847eed774cc44949f06ff8a11073ff8b0
-
Size
39KB
-
MD5
63b13e9494551cc900fa804e617ce620
-
SHA1
d36015df18a330f7d700158d1b89ef26b3e8837d
-
SHA256
b905ae02cb1095347e0d335aa2588a2847eed774cc44949f06ff8a11073ff8b0
-
SHA512
519223305f58cf8557d2a215acba3a0b311b9a72ec63082c5792aa00aa07936468e08888c20166f957c96149330508ecde7012f4bb01519768d1cc9994ffa683
-
SSDEEP
768:r3EDvDJ4/Oo2mBRQ5nZ9K1nZwc9AAlmO1FP8f4R/CQLuL1Q3MJk:AnJCOoTBej6nZwPeO4ZqL1Q3My
Malware Config
Signatures
Files
-
b905ae02cb1095347e0d335aa2588a2847eed774cc44949f06ff8a11073ff8b0.exe windows x86
b51306da45da4cf53dabb436dac72fac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TlsGetValue
FindAtomW
GetPrivateProfileStringW
GetModuleFileNameA
GetNumberFormatW
GetConsoleAliasW
EnumCalendarInfoW
ResumeThread
SetLastError
SetEvent
GetCurrentThreadId
GetCurrentProcessId
ReadFile
FindClose
HeapCreate
lstrlenW
EnterCriticalSection
LocalFree
GetDriveTypeW
user32
DispatchMessageA
GetClassInfoA
DrawTextW
IsWindow
CallWindowProcW
GetSysColor
GetKeyState
SetFocus
GetClientRect
GetCursorInfo
GetMenuInfo
GetKeyboardType
DispatchMessageA
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ