Static task
static1
Behavioral task
behavioral1
Sample
b3ae696671a702fc963984e37790f8a35aba4b1eddd1f6c9926a68f0125e2699.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b3ae696671a702fc963984e37790f8a35aba4b1eddd1f6c9926a68f0125e2699.exe
Resource
win10v2004-20220812-en
General
-
Target
b3ae696671a702fc963984e37790f8a35aba4b1eddd1f6c9926a68f0125e2699
-
Size
804KB
-
MD5
46b2fd786fe5a254d9b94bc4fffd2620
-
SHA1
3de10a7d0b034cc5fb678b3093155428e6fbc479
-
SHA256
b3ae696671a702fc963984e37790f8a35aba4b1eddd1f6c9926a68f0125e2699
-
SHA512
c5263f9e97c71e1862a7e49a00821bcc6ae3ff1dd1306261897faaf85a1a482027e41c1596fdafb6e2f1ba64d0687deca27aa65d8fb3136fe2bf753bad537a79
-
SSDEEP
24576:lzRaPDRLRruB8zQ3V6jHXD3y3bd8lGEZJDu:BIPVLRKicUD3myG4U
Malware Config
Signatures
Files
-
b3ae696671a702fc963984e37790f8a35aba4b1eddd1f6c9926a68f0125e2699.exe windows x86
53359c116e80c8da3904c56dd8a0d012
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalFlags
LeaveCriticalSection
GetTickCount
GetVolumePathNameW
lstrlenA
CreateFileW
OpenMutexW
CreateDirectoryA
PulseEvent
IsValidLocale
DeleteFileW
DeleteFileW
AddAtomA
VirtualProtect
SetFileTime
GetModuleHandleA
SetFilePointer
InterlockedExchange
OpenEventW
SetEvent
HeapDestroy
GetModuleFileNameA
GetCurrentThreadId
GetFileAttributesW
CreateFileW
user32
GetWindowLongA
DestroyMenu
MessageBoxA
PeekMessageA
IsMenu
SetFocus
DestroyIcon
wsprintfA
LoadCursorA
SetRect
DispatchMessageA
GetWindowTextA
GetWindowLongA
dmdskmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
?namecmp@@YGHPBG0@Z
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE