Static task
static1
Behavioral task
behavioral1
Sample
b2cacdcaa7ea0804e07ca964a3cb0591b7554bf399423ba073f653452c5af4e8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b2cacdcaa7ea0804e07ca964a3cb0591b7554bf399423ba073f653452c5af4e8.exe
Resource
win10v2004-20220812-en
General
-
Target
b2cacdcaa7ea0804e07ca964a3cb0591b7554bf399423ba073f653452c5af4e8
-
Size
38KB
-
MD5
79ba78b1893a8d7b1d45e79548446fa0
-
SHA1
6a9968618c391349e5f8480665a7fcff879e1b14
-
SHA256
b2cacdcaa7ea0804e07ca964a3cb0591b7554bf399423ba073f653452c5af4e8
-
SHA512
6c1fefd49c8a0014da7da9ffdf44277b3505bd4d51e04f9ded442afeac81eb4b6355d2467173b369e5d5eea4e3224db3b6a2e70faaf5536f00b7f4221acc843e
-
SSDEEP
768:DUn868R8Z8W88m8E8Qvp7BIG/lli9ytRL4OcpuqIV3jVfWmZzObs1NoOZZWKPG:Dyzq+ERpfvp7BIG/lliO0p5m3jVfpjn1
Malware Config
Signatures
Files
-
b2cacdcaa7ea0804e07ca964a3cb0591b7554bf399423ba073f653452c5af4e8.exe windows x86
5ca52f1b3a80496ffc820580725a8e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_CItanh
sprintf
fabs
ceil
malloc
floor
free
fclose
memcpy
strlen
strcpy
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
InitializeCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
TlsAlloc
WriteFile
CloseHandle
SetFilePointer
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
FlushFileBuffers
WriteConsoleA
user32
MessageBoxA
DestroyWindow
GetPropA
RemovePropA
CallWindowProcA
DefWindowProcA
SetPropA
SetWindowLongA
GetWindow
SetActiveWindow
SendMessageA
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
FillRect
DestroyIcon
gdi32
GetStockObject
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
comctl32
InitCommonControlsEx
ole32
RevokeDragDrop
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ