Static task
static1
Behavioral task
behavioral1
Sample
b3073ba5f099334637452f2bb9b66b85d6cda7d7855e98bafbece11614e18cfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3073ba5f099334637452f2bb9b66b85d6cda7d7855e98bafbece11614e18cfb.exe
Resource
win10v2004-20220812-en
General
-
Target
b3073ba5f099334637452f2bb9b66b85d6cda7d7855e98bafbece11614e18cfb
-
Size
75KB
-
MD5
4f04b91ec44df0fc1644e0e1e75c3c80
-
SHA1
7b328c5a0e33f5bf8163a7888a99ea8079ba9ed0
-
SHA256
b3073ba5f099334637452f2bb9b66b85d6cda7d7855e98bafbece11614e18cfb
-
SHA512
73b6ee162a53c4bbcf29e8e15786b3c04c417126247fc7713f1747cae066fee45502ff624858f925df0c176433e7de7f22bd30c8da2cbb949b929e24e569d83b
-
SSDEEP
768:fedlZA+mXHax0nvgQC+Jqw0lpaZmvu2nFlDvOw8xskuA68QTlNcN5bj5g65wlKP:fgtp6vgQ3JklsQvFnbT456tTlNEbjrH
Malware Config
Signatures
Files
-
b3073ba5f099334637452f2bb9b66b85d6cda7d7855e98bafbece11614e18cfb.exe windows x86
3dc108499aeb32c844904d2171993f4d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedExchange
SetFilePointer
IsValidLocale
ResumeThread
CreateFileW
CreateDirectoryA
SuspendThread
GetVersionExA
GetModuleHandleA
GetCurrentThreadId
CreateMutexA
GetVolumePathNameW
GetFileAttributesW
OpenEventW
lstrlenA
HeapDestroy
GetTickCount
AddAtomA
CreateFileW
GetModuleFileNameA
GlobalFlags
LeaveCriticalSection
PulseEvent
VirtualProtect
SetEvent
user32
GetWindowLongA
GetWindowTextA
DestroyIcon
wsprintfA
DestroyMenu
GetWindowLongA
LoadCursorA
DispatchMessageA
PeekMessageA
MessageBoxA
SetRect
SetFocus
IsMenu
dmdskmgr
?namecmp@@YGHPBG0@Z
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE