Static task
static1
Behavioral task
behavioral1
Sample
b1ba520e5fec2955a41d54b300c2d78d987533a227e5357a9a53e71f6b42c3e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1ba520e5fec2955a41d54b300c2d78d987533a227e5357a9a53e71f6b42c3e9.exe
Resource
win10v2004-20220812-en
General
-
Target
b1ba520e5fec2955a41d54b300c2d78d987533a227e5357a9a53e71f6b42c3e9
-
Size
108KB
-
MD5
90c9d03db1a8df06d4d20690b2c4fe90
-
SHA1
acda3f1c7cc7ed6920a9ad5c599b46209b6f566e
-
SHA256
b1ba520e5fec2955a41d54b300c2d78d987533a227e5357a9a53e71f6b42c3e9
-
SHA512
23449ff52b5a814af12db357dd5b8def17418a190c22a17883b00ec090ee88ea2f33e653404276d5e635b992b90bada1f8f8ab81443665d08512aa64b8937415
-
SSDEEP
3072:QRssq1sONcOI9uRYVZl2pRmQKqk8sxyw7W:QRYscIERYVZlyRNGJ7
Malware Config
Signatures
Files
-
b1ba520e5fec2955a41d54b300c2d78d987533a227e5357a9a53e71f6b42c3e9.exe windows x86
bb69529c898cfca8f9f7aa3e6bb64742
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetCurrentProcess
GetLastError
LoadLibraryA
GetProcAddress
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentStringsW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
user32
wsprintfA
setupapi
SetupOpenInfFileA
SetupGetLineTextA
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiBuildDriverInfoList
SetupDiSetSelectedDriverA
SetupDiCreateDeviceInfoA
SetupDiOpenDeviceInfoA
SetupDiRemoveDevice
SetupDiRegisterDeviceInfo
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsA
SetupDiCallClassInstaller
SetupInstallServicesFromInfSectionA
SetupCloseInfFile
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
u"�H� Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE