Static task
static1
Behavioral task
behavioral1
Sample
b969c92ee78862f39cc235cacde9261dc1300258dcc6868c39139112e6b2bb01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b969c92ee78862f39cc235cacde9261dc1300258dcc6868c39139112e6b2bb01.exe
Resource
win10v2004-20220901-en
General
-
Target
b969c92ee78862f39cc235cacde9261dc1300258dcc6868c39139112e6b2bb01
-
Size
135KB
-
MD5
1539eb645aa551579b076c7bb6268f66
-
SHA1
ed2ec1eec0836f7ef28c8310598eff7a25f5ccd3
-
SHA256
b969c92ee78862f39cc235cacde9261dc1300258dcc6868c39139112e6b2bb01
-
SHA512
6961064c615c60140b9c0a2b243deae6b0f554b243565ca7515546853cbc6fb4fde917c9ded9db7f2d943bbe2ff43a1564c8476fd7d036f3a3ab59067910096f
-
SSDEEP
3072:2Q0kMPr2ENjyAYNVMkGC5InhE+jIB+FB9H8wvrvHiDQipJZOPnnN5wJVW:RlArDRDk2E+EIFB9H8WuDQInOE
Malware Config
Signatures
Files
-
b969c92ee78862f39cc235cacde9261dc1300258dcc6868c39139112e6b2bb01.exe windows x86
91d57720a119d8b9f099deec4276c60b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
GetPrivateProfileSectionA
CreateFileA
GetTempFileNameA
CreateWaitableTimerW
GlobalFlags
GlobalFree
OpenFileMappingA
GlobalGetAtomNameW
SetThreadPriorityBoost
GetFullPathNameA
FindResourceA
InterlockedDecrement
SetCalendarInfoA
FindResourceExW
WriteProfileSectionW
FatalExit
SetThreadAffinityMask
TransactNamedPipe
SetFilePointer
WaitNamedPipeA
GetTimeZoneInformation
FormatMessageA
FindResourceExA
GlobalAddAtomA
GetModuleHandleA
SuspendThread
TlsAlloc
OutputDebugStringW
GetStdHandle
GetVolumeNameForVolumeMountPointA
GetProcessAffinityMask
GetUserDefaultUILanguage
CloseHandle
GetThreadSelectorEntry
user32
DdeSetQualityOfService
CharPrevExA
EnumDesktopsA
SetMessageQueue
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 471B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE