Static task
static1
Behavioral task
behavioral1
Sample
b237a74ed732f960ae692498379d9caba4f1c1eab9599462e3fc83829e72bedc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b237a74ed732f960ae692498379d9caba4f1c1eab9599462e3fc83829e72bedc.exe
Resource
win10v2004-20220812-en
General
-
Target
b237a74ed732f960ae692498379d9caba4f1c1eab9599462e3fc83829e72bedc
-
Size
124KB
-
MD5
6a50ab796e72ff8ea699d1123d137ad0
-
SHA1
1efeb411980921bc115e90e38e800eba083f5780
-
SHA256
b237a74ed732f960ae692498379d9caba4f1c1eab9599462e3fc83829e72bedc
-
SHA512
113256ee536279f0389b3b0002fea712220ee827b66f879c1148c590749b1cfc08e951ad45adfe73d033e5fbb26dad7f0d731621b6dd5756b0fbd8b406667935
-
SSDEEP
3072:4USF0679KaWuxQ5PVW/TH28lip8TKViFkRcOYnlZW:NgWuxQ5POtT
Malware Config
Signatures
Files
-
b237a74ed732f960ae692498379d9caba4f1c1eab9599462e3fc83829e72bedc.exe windows x86
67db2c26b3136413f0c21c19b75512e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
HeapFree
LocalReAlloc
MultiByteToWideChar
SetCurrentDirectoryA
GetProcAddress
lstrcatA
lstrcpyA
lstrcpynA
VirtualAllocEx
GetModuleHandleA
GetCommandLineA
FreeLibrary
SetErrorMode
ExitProcess
user32
LoadIconW
LoadCursorW
gdi32
GetStockObject
advapi32
RegOpenKeyExA
RegQueryValueExW
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ