Static task
static1
Behavioral task
behavioral1
Sample
b31c643f1a66768c2cf4fb524702767e5be2169c1e3d2de496f2346dbbeed183.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b31c643f1a66768c2cf4fb524702767e5be2169c1e3d2de496f2346dbbeed183.exe
Resource
win10v2004-20220812-en
General
-
Target
b31c643f1a66768c2cf4fb524702767e5be2169c1e3d2de496f2346dbbeed183
-
Size
769KB
-
MD5
055bcaf8cc785596ed581c55942b20e1
-
SHA1
aa0c49997138a8df747f42e0150b887a766bdd1a
-
SHA256
b31c643f1a66768c2cf4fb524702767e5be2169c1e3d2de496f2346dbbeed183
-
SHA512
4ddbf9db3473faa7372799212e8a97b37479983625880a23bb65846a17d7918ba4d3bc1b7f1c3268db2ba8b61056cca613c6fab74e0c2a7105de6c3ec010d4ef
-
SSDEEP
24576:gsLePdBIQTEReuwcahUaAeKybvCojO/q:g4YdBD9npPmoi
Malware Config
Signatures
Files
-
b31c643f1a66768c2cf4fb524702767e5be2169c1e3d2de496f2346dbbeed183.exe windows x86
ddcfac4cd75bc46876a31a6a3a7681fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
RemoveDirectoryW
lstrlenA
ReleaseMutex
GetVersion
GetModuleHandleA
CreateMutexA
CreateDirectoryW
Sleep
GetDriveTypeA
CloseHandle
WriteConsoleW
CreateFileA
VirtualProtectEx
RemoveDirectoryW
CreateFileMappingW
ReleaseSemaphore
GetFileSize
GetCommandLineW
HeapSize
DeleteFileA
OpenEventW
WriteFile
ResetEvent
SetStdHandle
user32
FindWindowA
GetWindowLongA
CreateIcon
DestroyMenu
GetClassInfoA
IsWindow
DrawTextW
IsZoomed
GetSysColor
DestroyMenu
DispatchMessageA
PeekMessageA
MessageBoxA
efsadu
EfsDetail
EfsDetail
EfsDetail
EfsDetail
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ