Static task
static1
Behavioral task
behavioral1
Sample
b9134e4dc1933399b5fe433cf1b0b1762b5a5151b9a3791fc908dcadc22c2a3f.exe
Behavioral task
behavioral2
Sample
b9134e4dc1933399b5fe433cf1b0b1762b5a5151b9a3791fc908dcadc22c2a3f.exe
Resource
win10v2004-20220812-en
General
-
Target
b9134e4dc1933399b5fe433cf1b0b1762b5a5151b9a3791fc908dcadc22c2a3f
-
Size
797KB
-
MD5
7c8aa196953b6b5342c85e4dc1e9c600
-
SHA1
c1a81d4c95a2052532655828965625063e3e3114
-
SHA256
b9134e4dc1933399b5fe433cf1b0b1762b5a5151b9a3791fc908dcadc22c2a3f
-
SHA512
b9d5cb1f5ab2b2010fcccb97c7d3b28df83a321b64058f9811a31b186e9fbd0c1d9fb59695806c154cb84129ae67157e3b9ea9d586db79c7e9268a64b5d935cc
-
SSDEEP
12288:jBaE9fOGCKcCu5B2B9AFWhLlIS9Fc4KMp/xxqVgKZ5k7J25yGUYwN6:I0ICuz2nCSxKy50Vxk7UtUYwN6
Malware Config
Signatures
Files
-
b9134e4dc1933399b5fe433cf1b0b1762b5a5151b9a3791fc908dcadc22c2a3f.exe windows x86
b16fdfd9e16248cf1e6fd11b6c467dc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
GetDriveTypeW
VirtualProtect
GetStdHandle
HeapSize
SetLastError
GetLocaleInfoA
ResetEvent
CancelIo
GetModuleHandleA
GetFileAttributesA
GetProcessHeap
DeleteFileA
CreateMailslotA
CreateDirectoryA
IsBadWritePtr
ReleaseMutex
SetLocalTime
GetCommandLineA
RemoveDirectoryA
MapViewOfFile
user32
GetWindowTextW
PeekMessageA
LoadCursorA
PostMessageW
GetCaretPos
DestroyMenu
SetFocus
GetWindowLongW
wsprintfA
GetCapture
SetCursor
DispatchMessageA
LoadImageA
filemgmt
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ