Static task
static1
Behavioral task
behavioral1
Sample
b3b999b15a41c843aeb5829b4be8395a23e4039e01c4e937658a51a3c7f129ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3b999b15a41c843aeb5829b4be8395a23e4039e01c4e937658a51a3c7f129ad.exe
Resource
win10v2004-20220812-en
General
-
Target
b3b999b15a41c843aeb5829b4be8395a23e4039e01c4e937658a51a3c7f129ad
-
Size
56KB
-
MD5
7134651fd4533f9a2315cfba7a0a4d50
-
SHA1
af143dd6c960321130b89d75c20d847ee4d96d93
-
SHA256
b3b999b15a41c843aeb5829b4be8395a23e4039e01c4e937658a51a3c7f129ad
-
SHA512
f8dddc577d04d69cfe6205fc6f7c629f1cb6797ec5c506d4458892ad2854f029379f300981153086cdd92dd89b26e71e13461d54e389ee820c2c9cb46b3f4288
-
SSDEEP
1536:bWdttuVLWX176KXLZk64zlei8gl7MtqPjh:ij8yUCklzleTgUqLh
Malware Config
Signatures
Files
-
b3b999b15a41c843aeb5829b4be8395a23e4039e01c4e937658a51a3c7f129ad.exe windows x86
13cba64e8dfc6af649c88f30fc45f055
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectW
DeleteTimerQueue
FindFirstChangeNotificationA
GetNumaAvailableMemoryNode
RegisterWowExec
GetVolumePathNamesForVolumeNameW
HeapSummary
PostQueuedCompletionStatus
EnumResourceTypesA
WaitForMultipleObjectsEx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE