Static task
static1
Behavioral task
behavioral1
Sample
b18ba95b0dcc7959c91fe2592b208a1fa8c8e5283f92965c102ce0c6735d1a8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b18ba95b0dcc7959c91fe2592b208a1fa8c8e5283f92965c102ce0c6735d1a8f.exe
Resource
win10v2004-20220812-en
General
-
Target
b18ba95b0dcc7959c91fe2592b208a1fa8c8e5283f92965c102ce0c6735d1a8f
-
Size
305KB
-
MD5
286739c6bbf1d4b8932325d839ba7730
-
SHA1
b3842b96053e5e9f9ebebd0cf8244548a6cda20e
-
SHA256
b18ba95b0dcc7959c91fe2592b208a1fa8c8e5283f92965c102ce0c6735d1a8f
-
SHA512
cd54c5b2737d2ef5c41d0a7c3becc5c958d76f0698407ec5b504108b775cc50352a4a82e76d87a59fe1c1269da85fe571173adab6856e5235f933791152d624d
-
SSDEEP
6144:NnV+PlHXjBjzIU0qumruZ0oVZrmbS6tJI8euhDU:NnVulHXjFzbOZVZrmmx8e4D
Malware Config
Signatures
Files
-
b18ba95b0dcc7959c91fe2592b208a1fa8c8e5283f92965c102ce0c6735d1a8f.exe windows x86
7254be4d848566cb149360e9b5a46654
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateFileA
HeapCreate
HeapDestroy
SuspendThread
GetProfileIntW
GetCurrentDirectoryA
ReleaseMutex
FindClose
GetEnvironmentVariableA
CloseHandle
GetTickCount
DeleteFileA
ExitProcess
GetTickCount
SetEndOfFile
WaitForSingleObject
GetFileSize
GetStartupInfoW
ResetEvent
CreateMutexW
SetLastError
HeapSize
InitializeCriticalSection
AddAtomA
shell32
DllUnregisterServer
ShellAboutA
DragQueryFileA
SHFree
SHGetSettings
ExtractIconA
ShellMessageBoxA
DragAcceptFiles
DragFinish
StrChrA
SHGetDiskFreeSpaceA
DuplicateIcon
SHGetMalloc
dpmodemx
SPInit
SPInit
SPInit
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ