Static task
static1
Behavioral task
behavioral1
Sample
1b5f2d732456ea4dac4ecbac8fb596959049d07947ce000dcfc839cb9698e59f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b5f2d732456ea4dac4ecbac8fb596959049d07947ce000dcfc839cb9698e59f.exe
Resource
win10v2004-20220901-en
General
-
Target
1b5f2d732456ea4dac4ecbac8fb596959049d07947ce000dcfc839cb9698e59f
-
Size
92KB
-
MD5
48622253b862e22a3d01b5aa293d0640
-
SHA1
6d19a54c261c91ebc5c30176510cfb73778ab0d8
-
SHA256
1b5f2d732456ea4dac4ecbac8fb596959049d07947ce000dcfc839cb9698e59f
-
SHA512
135cde007b1217e176bf13416e1dcde2b05c37dd61f2451c10085bf47ab8f87d611b4a074c19a1f6c3365ad0007a1c345348d0da73527500a79d0f23057fb00c
-
SSDEEP
1536:b4u3go2IRkIojcjjEHH43uIDmB2e5OAtjDb24yLT:n/29IoQjjEHY3uIW4ApDK4yLT
Malware Config
Signatures
Files
-
1b5f2d732456ea4dac4ecbac8fb596959049d07947ce000dcfc839cb9698e59f.exe windows x86
e56e9ac01005603b722128abf81572b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
GetLastError
WideCharToMultiByte
LockResource
LoadResource
FindResourceExA
LocalFree
OutputDebugStringA
FormatMessageA
FindClose
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
lstrlenA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CloseHandle
user32
MessageBoxA
LoadStringA
shell32
ShellExecuteExA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE