Static task
static1
Behavioral task
behavioral1
Sample
0b389a80b9502945fbaf2125901c1cb185a0c2a2facdea92a5596d1630488827.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0b389a80b9502945fbaf2125901c1cb185a0c2a2facdea92a5596d1630488827.exe
Resource
win10v2004-20220812-en
General
-
Target
0b389a80b9502945fbaf2125901c1cb185a0c2a2facdea92a5596d1630488827
-
Size
151KB
-
MD5
a113d66af2b59044d97be64d5ca0e132
-
SHA1
814d60d4f80789dc4a47fb4aa3adf9381a8a3427
-
SHA256
0b389a80b9502945fbaf2125901c1cb185a0c2a2facdea92a5596d1630488827
-
SHA512
549f55c14ed11442275233ff3177dc210c028a6a7a77f3e76544ad99f8d0109e31d05de1edabf9743aea804c37cbb5a9cb4bd8c0d510d8ad5db0425b5c960527
-
SSDEEP
3072:h3kfgN4YsLqRqk3NgXQoUpXoOqh4vw3qRMQ2vIua+s6nmnmnmnmnsn:dfng4NggoaRRgc2vIua+suqqqqk
Malware Config
Signatures
Files
-
0b389a80b9502945fbaf2125901c1cb185a0c2a2facdea92a5596d1630488827.exe windows x86
4f2a2efffa465cbd366b5805d9dc5985
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryExW
LoadLibraryExA
CreateFileA
CreateProcessA
CreateProcessA
VirtualProtect
GetStartupInfoW
LoadLibraryExW
LoadLibraryExW
GetStartupInfoW
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetFileAttributesW
LoadLibraryExW
DeviceIoControl
GetSystemTimeAsFileTime
LoadLibraryExA
ReadProcessMemory
ReleaseMutex
DeviceIoControl
WriteProcessMemory
WaitForSingleObject
WaitForSingleObjectEx
Sections
.text Size: 142KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ