Static task
static1
Behavioral task
behavioral1
Sample
b41069c8626b36f36499b7d311de401a854845ded7c6d9551410da844801b45c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b41069c8626b36f36499b7d311de401a854845ded7c6d9551410da844801b45c.exe
Resource
win10v2004-20220812-en
General
-
Target
b41069c8626b36f36499b7d311de401a854845ded7c6d9551410da844801b45c
-
Size
207KB
-
MD5
0ae7389ea92b0a9fc253a2e7a5a26ab8
-
SHA1
8499f67950ac2b42dea2c4611cee7c95bafb2272
-
SHA256
b41069c8626b36f36499b7d311de401a854845ded7c6d9551410da844801b45c
-
SHA512
36104f5e5af24332c93fe0a2109efd110c441e932bcd3a4f9a45f3f4a20fbc9422ed5b04c6e54dbfc07aea0e0336acb8c7d89c5b499a329d5bb13d6790ee638c
-
SSDEEP
3072:80rXdUxyDRNNMahzjYewc68ynLsvCjGymme4AV:prXSxyDpNHyLsCmmhA
Malware Config
Signatures
Files
-
b41069c8626b36f36499b7d311de401a854845ded7c6d9551410da844801b45c.exe windows x86
c97cafd91f77592d0f0c5dd3a6c5eb6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
kernel32
GetVersionExW
MulDiv
FreeLibrary
LoadLibraryA
lstrlenA
SizeofResource
GetCurrentThreadId
HeapAlloc
FlushInstructionCache
GetCurrentProcess
LoadLibraryExA
GetModuleHandleA
InterlockedDecrement
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetTickCount
QueryPerformanceCounter
WriteFile
ole32
CoRegisterMallocSpy
OleIsCurrentClipboard
GetErrorInfo
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ