Static task
static1
Behavioral task
behavioral1
Sample
b224b55054e5993baddc403199006a4f02fc4f9293c686ee08fe0c0259e24421.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b224b55054e5993baddc403199006a4f02fc4f9293c686ee08fe0c0259e24421.exe
Resource
win10v2004-20220812-en
General
-
Target
b224b55054e5993baddc403199006a4f02fc4f9293c686ee08fe0c0259e24421
-
Size
166KB
-
MD5
53ee637cd616320a01b158521d1bca8f
-
SHA1
84ced55547090bb13a609f7959733ad2671f79c3
-
SHA256
b224b55054e5993baddc403199006a4f02fc4f9293c686ee08fe0c0259e24421
-
SHA512
d5640280eb56d0ab799f8498923544594e5cfaab6d18ba076c0d5bde57fa64a1b7c08a9b3ddafb0bd0405ac804183349620944586aae3c788447a48874ae586f
-
SSDEEP
3072:t2JsjX972NAbfnyv2shbDA0e/j8CyVcpfDjEesZdqev6UlvaASPbhFo:t20X972iL02OPzi8Mgesfqe3l1SDhF
Malware Config
Signatures
Files
-
b224b55054e5993baddc403199006a4f02fc4f9293c686ee08fe0c0259e24421.exe windows x86
303fee7798b35a5af7bd0184c40f49f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetCPInfoExA
EnterCriticalSection
HeapSize
InterlockedExchange
GetCPInfo
InterlockedIncrement
WideCharToMultiByte
UnhandledExceptionFilter
SetHandleCount
GetACP
GetTickCount
WriteFile
GetThreadLocale
GetStartupInfoA
EnumResourceNamesW
QueryPerformanceCounter
FreeEnvironmentStringsA
GetFileType
GetOEMCP
InitializeCriticalSection
TlsGetValue
lstrlenW
GetLocaleInfoA
GetEnvironmentStringsW
RaiseException
TlsSetValue
GetEnvironmentStrings
LeaveCriticalSection
RaiseException
GetStdHandle
FreeEnvironmentStringsW
MultiByteToWideChar
GetVersionExA
GetLastError
GetCurrentProcessId
gdi32
DeleteObject
GetTextMetricsA
GetDeviceCaps
GetTextExtentPointA
SelectObject
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
ole32
CoGetMalloc
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ