Static task
static1
Behavioral task
behavioral1
Sample
b509fa12191ef75bfd53029e63b608152093d633ddf50f27e07f04b0d065e22d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b509fa12191ef75bfd53029e63b608152093d633ddf50f27e07f04b0d065e22d.exe
Resource
win10v2004-20220901-en
General
-
Target
b509fa12191ef75bfd53029e63b608152093d633ddf50f27e07f04b0d065e22d
-
Size
766KB
-
MD5
19c1b78c28a9b49625c180d20dc955f7
-
SHA1
d10e099b0e9c525abfdc1e5ac3caed7f7a03f232
-
SHA256
b509fa12191ef75bfd53029e63b608152093d633ddf50f27e07f04b0d065e22d
-
SHA512
8a0c93f2691c15a8d456f391c96b1aec76895abd7762d9b53597c41447ef01f89154fcb403f587dcd9d93e64cde555dd5ab381e07b70d20c1a2984908538e728
-
SSDEEP
12288:/OeBS64rWIYa1rA/5Cg+rIz/nDK5y3WGjBziArDR4fpBpp+8G0S8aa:nERYa1rOCg+S2sfwA6ftp+8gI
Malware Config
Signatures
Files
-
b509fa12191ef75bfd53029e63b608152093d633ddf50f27e07f04b0d065e22d.exe windows x86
22b675274b7dc0fa2a1234c0a21ae3c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
HeapDestroy
SetLastError
OpenSemaphoreA
DeleteFileW
HeapSize
LoadLibraryA
GetProcessHeap
VirtualProtect
GetLocalTime
CreateFileA
GetTickCount
CreateHardLinkW
CreateMutexW
GetStartupInfoA
SetEvent
GetFileAttributesA
SetLastError
Sleep
ReadConsoleW
GetPriorityClass
CreateDirectoryW
GetFileSize
MapViewOfFile
CreateSemaphoreA
userenv
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
SsdpStartup
FindServices
CleanupCache
SsdpCleanup
Sections
.text Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE