Static task
static1
Behavioral task
behavioral1
Sample
b43149e9701657f1223c554e9b9ddf59ee9f05d44b26803f7aefef9ee834b1c6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b43149e9701657f1223c554e9b9ddf59ee9f05d44b26803f7aefef9ee834b1c6.exe
Resource
win10v2004-20220812-en
General
-
Target
b43149e9701657f1223c554e9b9ddf59ee9f05d44b26803f7aefef9ee834b1c6
-
Size
300KB
-
MD5
80498ecba1e42e79f6bb10efddfa1360
-
SHA1
82970ed5ada0dc804675c7721c813dedc202e0a8
-
SHA256
b43149e9701657f1223c554e9b9ddf59ee9f05d44b26803f7aefef9ee834b1c6
-
SHA512
2efc1be2234d60e033c29fa3cd848c449e5282747bede055490f1c3033df48b51cb0e0f96a235d8c68c822131992d54fbe50e72170dba005450b756d9af1b468
-
SSDEEP
6144:PMWnXn9lctrtVgvedDnI+U2bI8FqYZxsQ5F1:bXnvmrg6DnI25qu5X
Malware Config
Signatures
Files
-
b43149e9701657f1223c554e9b9ddf59ee9f05d44b26803f7aefef9ee834b1c6.exe windows x86
05ef82bc2ccb15ee82c4070933977c18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
GetDriveTypeW
SetLastError
CancelIo
GetExitCodeThread
GetTickCount
GetFileAttributesA
GetProcessHeap
MapViewOfFile
GetModuleHandleA
RemoveDirectoryA
CreateMailslotW
CreateDirectoryA
VirtualProtect
IsValidCodePage
FindClose
FindResourceA
ResetEvent
IsBadWritePtr
HeapSize
GetFileAttributesA
user32
DispatchMessageA
GetCapture
PeekMessageA
IsWindow
SetFocus
PostMessageW
LoadCursorA
GetWindowLongW
GetWindowTextW
LoadImageW
SetCursor
IsDialogMessageA
wsprintfW
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE