Static task
static1
Behavioral task
behavioral1
Sample
b1aab8a99cabf29131d0a9898118f68d12d5b31593152abc15e9fa7c1c1d7d6a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1aab8a99cabf29131d0a9898118f68d12d5b31593152abc15e9fa7c1c1d7d6a.exe
Resource
win10v2004-20220812-en
General
-
Target
b1aab8a99cabf29131d0a9898118f68d12d5b31593152abc15e9fa7c1c1d7d6a
-
Size
488KB
-
MD5
070f30b63d5f99c426c1de8376545b20
-
SHA1
6be39203f30f81ba87d2fe16f369b0af596e36fb
-
SHA256
b1aab8a99cabf29131d0a9898118f68d12d5b31593152abc15e9fa7c1c1d7d6a
-
SHA512
3a3c0747c389acea564bff6ca76959939d8108e2d39c3ecdfa7755cb690871cf207bf1e5c15d7b09259c1650b15c320bff2b17fbb190909a00c836aec5171eb9
-
SSDEEP
6144:snvT1EBIOsJErV6l8zzm7T+QBaQmzdZtYW1paW5cm4OreYPNbFOvR2Bv:snv+bBzC7n6ZtY4paWG8yYxEm
Malware Config
Signatures
Files
-
b1aab8a99cabf29131d0a9898118f68d12d5b31593152abc15e9fa7c1c1d7d6a.exe windows x86
e53501e1415339cc3b3d521f1d0c120f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlExtendedLargeIntegerDivide
NtSetTimerResolution
ZwSecureConnectPort
RtlSetSaclSecurityDescriptor
user32
GetMessageExtraInfo
GetProcessWindowStation
kernel32
GetCurrentThreadId
Sections
.text Size: 481KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE