Static task
static1
Behavioral task
behavioral1
Sample
b04c8207b6cecf983ac5e3839a27f5c7e362545c01f8447bd29a851c7784f77a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b04c8207b6cecf983ac5e3839a27f5c7e362545c01f8447bd29a851c7784f77a.exe
Resource
win10v2004-20220812-en
General
-
Target
b04c8207b6cecf983ac5e3839a27f5c7e362545c01f8447bd29a851c7784f77a
-
Size
36KB
-
MD5
a2b6f52c2d272a2b7ca1542496156160
-
SHA1
0800d67ed1b84b825048a3cec5eeeae70cc40a50
-
SHA256
b04c8207b6cecf983ac5e3839a27f5c7e362545c01f8447bd29a851c7784f77a
-
SHA512
f2d1f98cdfd77d36703e8789dfdc84a15c0e4849f72948d71e2664c6c1c4ef69fa7ab2595c97f1d1366308d1d6ce98fe96f9f09ee43c35fb577025831b811f38
-
SSDEEP
384:FMMP3hBtfZ4C9WOeaVjBLI8GKeXCryhlZXbTI6o:FJhRcGjBKcClZXbc6o
Malware Config
Signatures
Files
-
b04c8207b6cecf983ac5e3839a27f5c7e362545c01f8447bd29a851c7784f77a.exe windows x86
9674d7d174e17f39d9c1b485589acd69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
TerminateProcess
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetEnvironmentVariableA
GetModuleFileNameA
LCMapStringW
CopyFileA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeW
user32
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
ShellExecuteExA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE