Static task
static1
Behavioral task
behavioral1
Sample
b03853bc2c06fb2349d353eda96dbf879c396d41e2069e9b0d9f2224cd59cb30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b03853bc2c06fb2349d353eda96dbf879c396d41e2069e9b0d9f2224cd59cb30.exe
Resource
win10v2004-20220812-en
General
-
Target
b03853bc2c06fb2349d353eda96dbf879c396d41e2069e9b0d9f2224cd59cb30
-
Size
445KB
-
MD5
81040b1c5109722db95386aa50b8b4f0
-
SHA1
07114006bb1859a1b849616178c27053206692b0
-
SHA256
b03853bc2c06fb2349d353eda96dbf879c396d41e2069e9b0d9f2224cd59cb30
-
SHA512
673639843715572cbcd223c49f665b17d33f3999308c2a33900d25c5828db1834f313da03c6083b7edaa0723e668108818f0a97bf30063ffa74658a19685d047
-
SSDEEP
12288:QS98msFvqILRW2wr0kEp58SaPbhf3HDjAh0v6I:XpSXwrHDJ3H3MTI
Malware Config
Signatures
Files
-
b03853bc2c06fb2349d353eda96dbf879c396d41e2069e9b0d9f2224cd59cb30.exe windows x86
0e8feea482de367867cdf0b47c1e0f51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
CreateProcessW
shell32
GetFileNameFromBrowse
ntdll
NtQueryVirtualMemory
advapi32
SystemFunction025
user32
GetMessagePos
GetInputDesktop
Sections
.text Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE