Static task
static1
Behavioral task
behavioral1
Sample
b2d56f7570f16d01609edee2b354f46e8d4e429004295aaa038b8eca2ae65367.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2d56f7570f16d01609edee2b354f46e8d4e429004295aaa038b8eca2ae65367.exe
Resource
win10v2004-20220812-en
General
-
Target
b2d56f7570f16d01609edee2b354f46e8d4e429004295aaa038b8eca2ae65367
-
Size
183KB
-
MD5
0bf525d67e6ebaba77e91d97b9b14079
-
SHA1
80b8770c197e0ecef3717df0ef364c1e53a53899
-
SHA256
b2d56f7570f16d01609edee2b354f46e8d4e429004295aaa038b8eca2ae65367
-
SHA512
f7503d791e0a321981552f676f34e88084442c626247d75946d209556bd1233f65ad1e2829a4a2b58da362dd5c6ec9b36e52be819a41547307efb231007c106f
-
SSDEEP
3072:bMqKbTtCSIT0chwzzcdZKF8UvvoeWofjjpAVioRF8s//NLj6h+EvtRBWggiissda:o9MMmwzlqUHoeWofjjpAViY/lH6h+EvB
Malware Config
Signatures
Files
-
b2d56f7570f16d01609edee2b354f46e8d4e429004295aaa038b8eca2ae65367.exe windows x86
29637e11e194dc0202df96c219ccfc7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
GetStringTypeA
LCMapStringW
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ