Static task
static1
Behavioral task
behavioral1
Sample
b4ba9eb17f9631e96d7f2a702931e07bbbbca4cbdc74e0ba1d92eb4805f0369c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4ba9eb17f9631e96d7f2a702931e07bbbbca4cbdc74e0ba1d92eb4805f0369c.exe
Resource
win10v2004-20220812-en
General
-
Target
b4ba9eb17f9631e96d7f2a702931e07bbbbca4cbdc74e0ba1d92eb4805f0369c
-
Size
391KB
-
MD5
7d01ccb57c333400bbf82bf695c8670b
-
SHA1
fc61ffa909a099c18c2ff8b53136652130693b55
-
SHA256
b4ba9eb17f9631e96d7f2a702931e07bbbbca4cbdc74e0ba1d92eb4805f0369c
-
SHA512
3f30cffd333ceece6f0094767d4a0ec837410676c4073a4503ff506ab2711f404d68461d800b502727e797e5b36e68577019068b0ec19e2fb925503626564e5c
-
SSDEEP
12288:cRMPHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:cRMPkAJLjpFvN/ytkjEOfoMWN
Malware Config
Signatures
Files
-
b4ba9eb17f9631e96d7f2a702931e07bbbbca4cbdc74e0ba1d92eb4805f0369c.exe windows x86
b5b146fa800fe30abc20727c48c615c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
HeapCreate
GetPrivateProfileStringA
IsBadStringPtrW
GetFileTime
LoadLibraryW
WriteFile
ReleaseMutex
GetDriveTypeA
FindClose
CreateEventW
GetCurrentThreadId
TlsGetValue
GetEnvironmentVariableW
LocalFree
GlobalFlags
FindAtomA
lstrlenW
GetCurrentProcessId
InitializeCriticalSection
user32
CallWindowProcW
GetKeyboardType
DrawTextA
CreateWindowExA
GetSysColor
SetFocus
GetSysColor
GetClientRect
GetClassInfoA
EndDialog
IsWindow
DrawStateW
DispatchMessageA
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ