Static task
static1
Behavioral task
behavioral1
Sample
b603ddd78de8f3154e48eef93a54460c6d86b2da77effbea537f48a19eb1a723.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b603ddd78de8f3154e48eef93a54460c6d86b2da77effbea537f48a19eb1a723.exe
Resource
win10v2004-20220812-en
General
-
Target
b603ddd78de8f3154e48eef93a54460c6d86b2da77effbea537f48a19eb1a723
-
Size
148KB
-
MD5
508a41b48bc5d8ff8eff601327e9fc50
-
SHA1
627b539d46dbe4d37025926cc2d91b2c604f016b
-
SHA256
b603ddd78de8f3154e48eef93a54460c6d86b2da77effbea537f48a19eb1a723
-
SHA512
2cd8b0e5504ba3eb26b440973318b227e58d30f5c06d41e2b8af28ad4fd26223aebf3c74d92f16aec91160a4da6c5371377e29c2cf424479ab3ad3c078b6c4c6
-
SSDEEP
3072:iJd2bn0Rw7FNGLixt3beIvfcyU5WJIqF:c2b0cHjPvLWqF
Malware Config
Signatures
Files
-
b603ddd78de8f3154e48eef93a54460c6d86b2da77effbea537f48a19eb1a723.exe windows x86
074428f6332775eb793071c21e71b606
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
QueryPerformanceCounter
GetStartupInfoW
CompareFileTime
GetCurrentThread
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
GetCurrentThreadId
VirtualAlloc
GetStringTypeW
FreeLibrary
FindClose
ReadFile
FreeEnvironmentStringsW
lstrlenA
HeapAlloc
FormatMessageW
LoadLibraryW
GetFileAttributesW
GetModuleFileNameA
SetEndOfFile
MultiByteToWideChar
GetEnvironmentStringsW
InterlockedCompareExchange
TlsFree
EnterCriticalSection
SetErrorMode
HeapSize
lstrlenW
GetCommandLineW
GetModuleHandleW
HeapFree
WriteFile
SetFilePointer
LoadResource
CreateEventW
GlobalAlloc
GetOEMCP
GetVersionExW
SetHandleCount
DeleteCriticalSection
LCMapStringW
LoadLibraryExW
SetLastError
ExitProcess
GetSystemInfo
HeapDestroy
InterlockedExchange
LoadLibraryA
FindFirstFileW
CreateFileA
LocalAlloc
LeaveCriticalSection
InitializeCriticalSection
HeapCreate
LocalFree
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
IsValidCodePage
GetVersionExA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLastError
GetCommandLineA
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
Sleep
GetCPInfo
GetACP
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
user32
GetSystemMetrics
msi
ord50
shell32
SHFileOperationW
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ