Static task
static1
Behavioral task
behavioral1
Sample
b0461dcf7998ca3545063e358be8113292fc5adca065055d03ff42c28b1f1ecc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b0461dcf7998ca3545063e358be8113292fc5adca065055d03ff42c28b1f1ecc.exe
Resource
win10v2004-20220901-en
General
-
Target
b0461dcf7998ca3545063e358be8113292fc5adca065055d03ff42c28b1f1ecc
-
Size
206KB
-
MD5
7202b42ccb9e27dd68a5a0243e6feba0
-
SHA1
a4e82d4178fc2868c1638266f3563960d6e8554f
-
SHA256
b0461dcf7998ca3545063e358be8113292fc5adca065055d03ff42c28b1f1ecc
-
SHA512
beb3d05b7c62c92efa0c4e133e546b631cb284c0d6401b36c987b8e28a896e5429ea4722e41f31e8ed997ee867d2c284461b3f3b4c17909e49fb7e33978bc7fb
-
SSDEEP
6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738y7:Pr22IUX0E7G45Oe5EwI
Malware Config
Signatures
Files
-
b0461dcf7998ca3545063e358be8113292fc5adca065055d03ff42c28b1f1ecc.exe windows x86
3811608d106bc5bdb881254d6131ef83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle
schannel
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ