Static task
static1
Behavioral task
behavioral1
Sample
b1dcde04bbb7865eeda4cd895f6a223af804c38b8c8b5e9ac26d0a5a82d6f5f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1dcde04bbb7865eeda4cd895f6a223af804c38b8c8b5e9ac26d0a5a82d6f5f8.exe
Resource
win10v2004-20220812-en
General
-
Target
b1dcde04bbb7865eeda4cd895f6a223af804c38b8c8b5e9ac26d0a5a82d6f5f8
-
Size
814KB
-
MD5
1d35aa7077d14e2f7d4010168d9418c4
-
SHA1
e68a05351cee17852c963242d0827a051c1e4093
-
SHA256
b1dcde04bbb7865eeda4cd895f6a223af804c38b8c8b5e9ac26d0a5a82d6f5f8
-
SHA512
17bf23ca7b1caed85125443c089725ae8acd0b42651e3241afc9c1674d2fb97c845fd687133e91ff57bce87c6040cfb70946d40424c621fc658877d9cdd132aa
-
SSDEEP
12288:cwyn+EQS9fhYFJFa41UFhihsQCqmTgmwsAnZTVUcIacWOzwqlM6i5lTRekyp72qW:c/cSmFP+hBIsAZTqRaOzhi51SpF0Bl
Malware Config
Signatures
Files
-
b1dcde04bbb7865eeda4cd895f6a223af804c38b8c8b5e9ac26d0a5a82d6f5f8.exe windows x86
c8cf4914d5512b23cb96282c0b86dc24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
SetConsoleCursorInfo
GetLastError
GetACP
ExitThread
ReleaseMutex
GetModuleHandleA
HeapCreate
GlobalFree
GetEnvironmentVariableA
LoadLibraryExW
HeapDestroy
SetLastError
TlsGetValue
FindClose
CreateFileA
CreateMutexA
LocalUnlock
FindResourceA
UnmapViewOfFile
user32
GetDC
GetDlgItem
DispatchMessageA
CallWindowProcA
FillRect
CheckRadioButton
GetFocus
CopyRect
DefWindowProcW
DrawMenuBar
DrawEdge
GetIconInfo
IsWindow
uxtheme
GetThemeSysInt
GetThemeRect
DrawThemeEdge
DrawThemeText
DrawThemeIcon
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ