Static task
static1
Behavioral task
behavioral1
Sample
b9674a3e3e775cbea079e47172344bfe5d22293aea62691eb361d73d62ec7de4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9674a3e3e775cbea079e47172344bfe5d22293aea62691eb361d73d62ec7de4.exe
Resource
win10v2004-20220812-en
General
-
Target
b9674a3e3e775cbea079e47172344bfe5d22293aea62691eb361d73d62ec7de4
-
Size
306KB
-
MD5
718ad30731e4e3a616a07e080573cec0
-
SHA1
caa2179316884f07cd575309987536a766d79b23
-
SHA256
b9674a3e3e775cbea079e47172344bfe5d22293aea62691eb361d73d62ec7de4
-
SHA512
1a6644211f39a34056a6e4757fc06f01f0d2854b94bd82f0d51ea5479ddeacfd1ce8699bf2186c5dea7b7892c25a7ddc32a4570325d82f8341c1ca3422e5bbf2
-
SSDEEP
6144:eoG8WnWtK+F9uAhd9AptnZ5NLQV/M/EKX/b0z6C7fvpCVZLNULc:eFWtKolGDZ/d/bX/b0DQ
Malware Config
Signatures
Files
-
b9674a3e3e775cbea079e47172344bfe5d22293aea62691eb361d73d62ec7de4.exe windows x86
fc5baacaa077d824c8ac2f6a8fc856f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MapViewOfFile
HeapFree
RemoveDirectoryW
SetLastError
GetModuleHandleA
GetFileAttributesA
VirtualProtect
LocalLock
IsBadWritePtr
FindResourceW
GetLocaleInfoW
GetStringTypeA
GetDriveTypeW
GetExitCodeThread
FindClose
TlsGetValue
GetTickCount
GetFileAttributesA
GetCurrentProcess
CreateDirectoryW
IsValidCodePage
user32
LoadStringW
PostMessageW
SetFocus
IsDialogMessageA
LoadCursorA
PeekMessageW
SetCursor
wsprintfW
IsWindow
LoadImageW
DispatchMessageA
GetWindowLongW
GetWindowTextW
msctf
TF_InitSystem
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE