Static task
static1
Behavioral task
behavioral1
Sample
b7d0744fa21416e83ebd9adfc1d4ffbc170c878e4fee3eeebf0c5a66fdf94af6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7d0744fa21416e83ebd9adfc1d4ffbc170c878e4fee3eeebf0c5a66fdf94af6.exe
Resource
win10v2004-20220901-en
General
-
Target
b7d0744fa21416e83ebd9adfc1d4ffbc170c878e4fee3eeebf0c5a66fdf94af6
-
Size
199KB
-
MD5
6fa479ff06065b51858e1729989caf90
-
SHA1
3038e0601927afe79a65a64426343cdaa45f2c66
-
SHA256
b7d0744fa21416e83ebd9adfc1d4ffbc170c878e4fee3eeebf0c5a66fdf94af6
-
SHA512
0df54da47842b640593b1cd70a776d70d740933203dc6032a21504c1049ad4f49bed0b097c249aa0cfd4cd061b9eb10c2faaa58a7125e2716cc51bb4cf94ba71
-
SSDEEP
6144:f3WFAVsKNONeoARCGkL2dS4AByHKZ51o:+F6ZNmdkCA9tg51o
Malware Config
Signatures
Files
-
b7d0744fa21416e83ebd9adfc1d4ffbc170c878e4fee3eeebf0c5a66fdf94af6.exe windows x86
b531284e47b5c872ac4c2355222d3c82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
TerminateProcess
VirtualProtect
shell32
SHAppBarMessage
StrRChrIA
StrStrIA
gdi32
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable
wsock32
bind
WSAStartup
listen
Sections
.text Size: 38KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 729KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ