Static task
static1
Behavioral task
behavioral1
Sample
b0065725b1fff33775298ab569c56791a31b40f61693d51107db1840b3f45d49.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0065725b1fff33775298ab569c56791a31b40f61693d51107db1840b3f45d49.exe
Resource
win10v2004-20220812-en
General
-
Target
b0065725b1fff33775298ab569c56791a31b40f61693d51107db1840b3f45d49
-
Size
72KB
-
MD5
07dcf613072ac2a739461b08ae290000
-
SHA1
467abdd3a475513f80f0ab5fead0a64d5711c310
-
SHA256
b0065725b1fff33775298ab569c56791a31b40f61693d51107db1840b3f45d49
-
SHA512
0157c0b5f903caeae2338cc92fb4e18d17a780b73e9dee7a3c46d3f25c41cf1127b631f96666a4ebdcf4a5ccea67f08a22a7c0b918a8848a003cd743f229d1ac
-
SSDEEP
768:ceUNEB7v9m/uI30lJBkvTePNH0iolLPsJLW21tJJtbsB9cpyuETXbULEqNMM34N4:ceU2m/r3+Wvi3ol7QP1jbByXbqEJ
Malware Config
Signatures
Files
-
b0065725b1fff33775298ab569c56791a31b40f61693d51107db1840b3f45d49.exe windows x86
8ae23c0e23439b8f59a5785b5efd4855
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetLastError
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
SetWindowLongW
MessageBoxW
PostMessageW
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW
msvcrt
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_vsnwprintf
_initterm
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE