Static task
static1
Behavioral task
behavioral1
Sample
0b9603eefaf17c7ecb30d3a0c6e23f25766cf045d0d0a48c132c878d5e6aa278.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0b9603eefaf17c7ecb30d3a0c6e23f25766cf045d0d0a48c132c878d5e6aa278.exe
Resource
win10v2004-20220812-en
General
-
Target
0b9603eefaf17c7ecb30d3a0c6e23f25766cf045d0d0a48c132c878d5e6aa278
-
Size
145KB
-
MD5
487bb4cd6953a6a7d57cccb0040488a0
-
SHA1
c78bcafee5a2c8ea378fa666633ea43130112f52
-
SHA256
0b9603eefaf17c7ecb30d3a0c6e23f25766cf045d0d0a48c132c878d5e6aa278
-
SHA512
7c7af348591bd0154623de709f1475edcf3327d5cefd70c80d293c3e4716c5ee8da54939a7f9b69058b7949efe26fe449af2db4f5847f6265e9470188577ffbc
-
SSDEEP
3072:7ekTt+9oW07A7UpUjDEYo1y7W2/6jEkKUY4Twg+:BhC07YDEYL7zgKUY4i
Malware Config
Signatures
Files
-
0b9603eefaf17c7ecb30d3a0c6e23f25766cf045d0d0a48c132c878d5e6aa278.exe windows x86
5de0a4ed27ec9d2e9384498f77a15021
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleFileNameA
LoadLibraryA
GetSystemInfo
MultiByteToWideChar
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
ReadFile
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ