Static task
static1
Behavioral task
behavioral1
Sample
b128a77d5ec64c9c381ffd00e3ff16bef1b1c4305b82d478cc5aebe48a9a6a17.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b128a77d5ec64c9c381ffd00e3ff16bef1b1c4305b82d478cc5aebe48a9a6a17.exe
Resource
win10v2004-20220812-en
General
-
Target
b128a77d5ec64c9c381ffd00e3ff16bef1b1c4305b82d478cc5aebe48a9a6a17
-
Size
229KB
-
MD5
a03b6789c20160ce54f471a90be05c63
-
SHA1
afdba71783136080119a5c6d13a3276b46da37ff
-
SHA256
b128a77d5ec64c9c381ffd00e3ff16bef1b1c4305b82d478cc5aebe48a9a6a17
-
SHA512
e417fcf786e4307088c5a8055074e1a5f56be3d78f92318fe0f9ac75ae0a939e2b7ca9d60f5738ee237a6cd417d8d676a3967bea65b32dce733647e944a47bfe
-
SSDEEP
6144:YkLzkmdiKhEvJ9DMdGDg4g2YdAyhNa+24e18NJW6CBYPYH:YVmiKKUNdbNp24NJW6C6AH
Malware Config
Signatures
Files
-
b128a77d5ec64c9c381ffd00e3ff16bef1b1c4305b82d478cc5aebe48a9a6a17.exe windows x86
7d95b8ef52b732ea7690db73a20cd988
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
RtlUnwind
GetConsoleOutputCP
GlobalGetAtomNameA
WriteConsoleA
SetStdHandle
TlsSetValue
GetACP
GetDateFormatA
HeapSize
GetLocaleInfoA
IsValidCodePage
EnumResourceNamesA
GetTimeFormatA
HeapReAlloc
CreateHardLinkA
MultiByteToWideChar
TlsGetValue
SetFilePointer
GetCPInfo
TlsAlloc
GetOEMCP
RaiseException
shell32
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHBrowseForFolderW
SHAppBarMessage
ShellExecuteExW
DragAcceptFiles
ShellExecuteW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
Shell_NotifyIconW
occache
FindControlClose
Sections
.text Size: 124KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ