Static task
static1
Behavioral task
behavioral1
Sample
b0de77fc3ad5ebd2aa0c0942844d0383fab1ff79c45f32d6cb657a755290624e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0de77fc3ad5ebd2aa0c0942844d0383fab1ff79c45f32d6cb657a755290624e.exe
Resource
win10v2004-20220901-en
General
-
Target
b0de77fc3ad5ebd2aa0c0942844d0383fab1ff79c45f32d6cb657a755290624e
-
Size
739KB
-
MD5
36de7cf27a106073ea8c7e424c4a5f77
-
SHA1
fe74688cd0489461b0117ceacf272eff2c98de7a
-
SHA256
b0de77fc3ad5ebd2aa0c0942844d0383fab1ff79c45f32d6cb657a755290624e
-
SHA512
6baad9e4d157fbe81e25fbaf01583f6568a3bd29e0beb0cae8cb32819c063669611362045726e1e9eb35ec2ead8e0b8a1e61ad450a8f30159677bb37d7f06ddb
-
SSDEEP
12288:GJsE5KbZCtMLKOt3xQZ9XlmYAdg4gvlKmxUh/uOFH+meTM/GRAt/Ti4J7SNrW+r:OV5AZCtMJsZ9VmYAutSrQi3iM7d+
Malware Config
Signatures
Files
-
b0de77fc3ad5ebd2aa0c0942844d0383fab1ff79c45f32d6cb657a755290624e.exe windows x86
830683c22a7c2ab4cec9de763c9c03ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameA
GlobalUnfix
TlsAlloc
GetHandleInformation
GetCommTimeouts
RemoveDirectoryA
LocalFlags
EnumResourceLanguagesW
DeleteFileW
SetHandleInformation
FatalAppExitW
SetLastError
IsProcessorFeaturePresent
BackupWrite
PostQueuedCompletionStatus
SetStdHandle
OpenEventW
EnumSystemLanguageGroupsA
LocalLock
WriteProfileSectionA
SetVolumeMountPointW
IsValidLanguageGroup
GetCommandLineW
GetCommMask
GetStringTypeA
ConnectNamedPipe
GetProcessAffinityMask
WaitForMultipleObjectsEx
SetLocalTime
SetFileApisToANSI
IsBadStringPtrW
CreateFileMappingW
CreateDirectoryA
GetComputerNameA
WriteProfileSectionW
GlobalFindAtomW
SetProcessShutdownParameters
EnumResourceLanguagesA
CallNamedPipeA
QueryInformationJobObject
GetLogicalDriveStringsA
BackupSeek
GlobalFindAtomA
IsDebuggerPresent
WriteFileGather
GetCurrentDirectoryA
lstrlenA
ExpandEnvironmentStringsA
EnumTimeFormatsA
WritePrivateProfileSectionA
UpdateResourceW
GlobalHandle
GetVersion
LocalFileTimeToFileTime
GetProfileStringW
MapViewOfFile
OpenProcess
GetDefaultCommConfigW
EnumDateFormatsExA
ResetWriteWatch
CreateIoCompletionPort
GetTickCount
GetPriorityClass
GlobalSize
EnumSystemLanguageGroupsW
GetOverlappedResult
CommConfigDialogA
FreeLibraryAndExitThread
VerSetConditionMask
WaitForSingleObjectEx
CreateDirectoryExW
CreateTimerQueue
GetSystemTime
OpenSemaphoreW
CreateJobObjectA
GetDevicePowerState
GetStartupInfoW
UnmapViewOfFile
FreeLibrary
DeleteTimerQueueEx
ReadFileScatter
SetLocaleInfoW
InitAtomTable
CreateJobObjectW
DefineDosDeviceW
GetComputerNameExA
DnsHostnameToComputerNameA
GetCommProperties
DeleteVolumeMountPointW
GetStartupInfoA
ConvertDefaultLocale
GetFileTime
CreateDirectoryExA
IsBadStringPtrA
FormatMessageW
LocalAlloc
GetUserDefaultUILanguage
GetDiskFreeSpaceA
GetFileAttributesExA
WaitNamedPipeA
GetFileSizeEx
GetNamedPipeInfo
lstrcatW
comctl32
InitCommonControlsEx
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegSetValueExW
RegCloseKey
RegQueryValueExA
user32
UpdateWindow
FrameRect
InvertRect
IntersectRect
ReleaseCapture
DestroyWindow
PostQuitMessage
MoveWindow
GetParent
LoadCursorW
MessageBoxW
GetClientRect
GetDlgItem
DispatchMessageW
InvalidateRect
GetWindowRect
wsprintfW
SendMessageW
DrawMenuBar
GetWindowPlacement
SetCapture
OffsetRect
PostMessageW
DialogBoxParamW
LoadBitmapW
LoadStringW
DrawTextW
PeekMessageW
MessageBoxA
FillRect
CreateWindowExW
PtInRect
CharLowerW
RegisterClassW
GetSubMenu
CheckRadioButton
SetRect
ReleaseDC
LoadStringA
IsIconic
GetMessageW
GetDesktopWindow
EnableMenuItem
LoadIconW
SetDlgItemTextW
TranslateAcceleratorW
SetTimer
WinHelpW
IsZoomed
EndPaint
UnionRect
IsDlgButtonChecked
GetMenu
GetSystemMetrics
ShowWindow
WaitMessage
LoadAcceleratorsW
GetDC
TranslateMessage
EndDialog
BeginPaint
CheckDlgButton
GetDlgItemTextW
GetForegroundWindow
DefWindowProcW
shlwapi
PathAppendA
PathCombineA
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 285KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ