Static task
static1
Behavioral task
behavioral1
Sample
0ba67a55016df9ddf65500b8e6b4e80044d02d242e4f4d54d414684ada22f6a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ba67a55016df9ddf65500b8e6b4e80044d02d242e4f4d54d414684ada22f6a7.exe
Resource
win10v2004-20220901-en
General
-
Target
0ba67a55016df9ddf65500b8e6b4e80044d02d242e4f4d54d414684ada22f6a7
-
Size
393KB
-
MD5
0aaaa71db6e33db27dac3cb332db8146
-
SHA1
866c418be8d45f79d8c8be801a74edb5c4a3ebad
-
SHA256
0ba67a55016df9ddf65500b8e6b4e80044d02d242e4f4d54d414684ada22f6a7
-
SHA512
3f12e8431ec4b71104d61a56ef29f98666e37de2cb9740ed99689d1993b771d4768a44bad09edf3d9f366b7bdecd850194adc617bbadd89389afb24e20485062
-
SSDEEP
6144:mjueq3xg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjd:Recg7dUmmLen1G6Lkjr7plWzuDRsVqZO
Malware Config
Signatures
Files
-
0ba67a55016df9ddf65500b8e6b4e80044d02d242e4f4d54d414684ada22f6a7.exe windows x86
70d0817a7f0fdf1bcbc6a9a70b74cc65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
LocalFree
GetLastError
GetCalendarInfoA
GetACP
LoadLibraryExA
LocalLock
CreateFileMappingA
CloseHandle
TlsGetValue
FreeEnvironmentStringsA
FindAtomA
WaitForMultipleObjects
CreateFileA
HeapCreate
GlobalUnlock
GetConsoleCP
FindClose
GetModuleHandleA
Sleep
user32
CheckRadioButton
CascadeWindows
SetFocus
GetIconInfo
FillRect
IsWindow
DrawEdge
DefWindowProcA
DrawTextA
GetDC
CallWindowProcA
DispatchMessageA
GetDlgItem
MessageBoxA
setupapi
CM_Add_Range
CM_Add_IDA
SetupCloseInfFile
SetupCloseLog
CMP_Report_LogOn
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ