Static task
static1
Behavioral task
behavioral1
Sample
b2e65ff46b8db07e1be8f9a2d2d4d9143306f1110f8296eb3f7dbf43defd6c51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2e65ff46b8db07e1be8f9a2d2d4d9143306f1110f8296eb3f7dbf43defd6c51.exe
Resource
win10v2004-20220812-en
General
-
Target
b2e65ff46b8db07e1be8f9a2d2d4d9143306f1110f8296eb3f7dbf43defd6c51
-
Size
240KB
-
MD5
6c0a2b3316f62545f181422be7e5b947
-
SHA1
b09b9e24f4ec84ea34ab13b6e1d96b7b30190607
-
SHA256
b2e65ff46b8db07e1be8f9a2d2d4d9143306f1110f8296eb3f7dbf43defd6c51
-
SHA512
24663881e9a53a92a3c16a99e23a1fff6954766c8da7f6a3f322d9b7d94334d3bb4130f08830bab2de70deff050e1c1d7b63e6a35adfa8391566e6bab04a9d06
-
SSDEEP
3072:gxnvICXdW+bacCEDNyS5UzlUuKJ3s/WwQij7Xd05eCJCNHce45DwkyHkR2/s:Wnwed2vINySiz6uJLTCJCZqyHkR2k
Malware Config
Signatures
Files
-
b2e65ff46b8db07e1be8f9a2d2d4d9143306f1110f8296eb3f7dbf43defd6c51.exe windows x86
0c5505af21cea94691c17d394b980327
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
ExitProcess
ntdll
_wcsnicmp
user32
OpenClipboard
TranslateMessage
GetMessageA
DispatchMessageW
ole32
CoInitialize
comctl32
ord17
powrprof
GetActivePwrScheme
GetPwrCapabilities
clusapi
ClusterEnum
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE