Static task
static1
Behavioral task
behavioral1
Sample
b0c5207b34e52992d7ef9500e6ab043edd72ad2ab9a731fc0efe65c82ca11c79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0c5207b34e52992d7ef9500e6ab043edd72ad2ab9a731fc0efe65c82ca11c79.exe
Resource
win10v2004-20220812-en
General
-
Target
b0c5207b34e52992d7ef9500e6ab043edd72ad2ab9a731fc0efe65c82ca11c79
-
Size
307KB
-
MD5
3a3bd42430646f088c0887a6b3b17de9
-
SHA1
c25ff9606749bbe0f107138a1998df70d2f5eedb
-
SHA256
b0c5207b34e52992d7ef9500e6ab043edd72ad2ab9a731fc0efe65c82ca11c79
-
SHA512
38e0e75bad38581b2909a62f537b01d943d9885ea270f13a507c6ddbf7cd7bc9ff4dc4a4d23fd3a99dcfee42527912b9ff85488c013cae1b091777054f184807
-
SSDEEP
6144:uglLQR1sYkdiYOKgZZ80DNvP2DPj50cx4uh3mQqSIJNpmEV:P5QR14OKsWAYzhmPX
Malware Config
Signatures
Files
-
b0c5207b34e52992d7ef9500e6ab043edd72ad2ab9a731fc0efe65c82ca11c79.exe windows x86
4e292b7bd0cbce95dce8517a93f5dbf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
CloseHandle
lstrcatA
SetEvent
SetLastError
ReleaseMutex
GetSystemTime
GetDiskFreeSpaceW
GetComputerNameA
LoadLibraryW
GetTickCount
HeapCreate
GetCommandLineA
ReleaseMutex
FindAtomA
CreateFileA
GetDriveTypeW
CreateThread
GetFileAttributesA
LoadLibraryA
user32
CloseWindow
GetKeyState
CallWindowProcA
DispatchMessageA
SetFocus
GetClipCursor
GetDlgItem
DestroyCaret
GetComboBoxInfo
CreateWindowExA
DrawStateA
GetClassInfoA
FillRect
cryptnet
CryptGetTimeValidObject
CryptUninstallCancelRetrieval
CryptCancelAsyncRetrieval
CryptGetObjectUrl
CertDllVerifyCTLUsage
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ