Static task
static1
Behavioral task
behavioral1
Sample
2b7b9a0ed0e0d65d848ed638523863169033c89f0c88a92e338e8ffb13946fb1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b7b9a0ed0e0d65d848ed638523863169033c89f0c88a92e338e8ffb13946fb1.exe
Resource
win10v2004-20220901-en
General
-
Target
2b7b9a0ed0e0d65d848ed638523863169033c89f0c88a92e338e8ffb13946fb1
-
Size
142KB
-
MD5
81fc35ecfc338a2883c577bd7afe2e80
-
SHA1
cc96d8fbdc2ac3b10d2263044491e3eb57d6f21b
-
SHA256
2b7b9a0ed0e0d65d848ed638523863169033c89f0c88a92e338e8ffb13946fb1
-
SHA512
ea46682aa75bcf57937c1780a68212d2563b87e6d49e33dfa5dbafda68cdc0f24ac47e01101c48f0e4f7f40be4e2dada488db4f9864c216487953764d0cb21ae
-
SSDEEP
3072:ZSmiNH2DCE8QWOGWYW0kpCVWuXCH9whSLsMRXnYzsfTE/6U20D9Ryo:ZSNFiga4KKsL3do
Malware Config
Signatures
Files
-
2b7b9a0ed0e0d65d848ed638523863169033c89f0c88a92e338e8ffb13946fb1.exe windows x86
df407510ed71d8eda5a4f42b53df8f94
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringA
kernel32
CloseHandle
CreateFileW
ExitProcess
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStringTypeW
GetTickCount
GetVersionExW
HeapAlloc
HeapFree
IsValidCodePage
LCMapStringW
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
RtlUnwind
VirtualProtect
WideCharToMultiByte
WriteFile
CompareStringW
ntdll
memmove
wcscpy
wcslen
wcscat
user32
GetDoubleClickTime
advapi32
RegOpenKeyExW
RegSetValueExW
Sections
AUTO Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ