Static task
static1
Behavioral task
behavioral1
Sample
b158a85d34a54bd84aee1828f970e7dac0d603f71076aa941c8e24a33beacb70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b158a85d34a54bd84aee1828f970e7dac0d603f71076aa941c8e24a33beacb70.exe
Resource
win10v2004-20220812-en
General
-
Target
b158a85d34a54bd84aee1828f970e7dac0d603f71076aa941c8e24a33beacb70
-
Size
262KB
-
MD5
65e15205b4706552333775a3a8fc4248
-
SHA1
77f6bbd314fec460d696fffae2d56dc80a1f0584
-
SHA256
b158a85d34a54bd84aee1828f970e7dac0d603f71076aa941c8e24a33beacb70
-
SHA512
4651e7f359eea674b5d27e99604c73d1027d6c7ac25d095d4c245caf0a05184f3280cab582aa89d21d28130aa3e7a2e1ae0bbb5fa5a5eaa98124f1671915dbec
-
SSDEEP
6144:K6G7D08zLFn8VOUGs/hyOaDHvKyUGnyEf:NGp18XhdyUGf
Malware Config
Signatures
Files
-
b158a85d34a54bd84aee1828f970e7dac0d603f71076aa941c8e24a33beacb70.exe windows x86
aee84f88256d9d46fadaf207521ef811
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetDriveTypeA
user32
LoadIconA
LoadIconW
LoadCursorW
advapi32
RegOpenKeyExA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text5 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text4 Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ