Static task
static1
Behavioral task
behavioral1
Sample
b19a97fa6b791fb563c7b0c2951429ec0bbaa0f4a7f5b080e12391d989b9299c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b19a97fa6b791fb563c7b0c2951429ec0bbaa0f4a7f5b080e12391d989b9299c.exe
Resource
win10v2004-20220812-en
General
-
Target
b19a97fa6b791fb563c7b0c2951429ec0bbaa0f4a7f5b080e12391d989b9299c
-
Size
300KB
-
MD5
20fa4e23180cbb70f0cb1e151f9fece0
-
SHA1
70d6250f433120e1dcc1b81c8a17b19ef2669e45
-
SHA256
b19a97fa6b791fb563c7b0c2951429ec0bbaa0f4a7f5b080e12391d989b9299c
-
SHA512
78fe8ca5eb4035cb26b0b33e2a517aa6d6dae4487acd4066ede9bb57caa63639085dd502aba67d348524ac745a3b6d5380843c2d55f6a2c014027aea049a9ccd
-
SSDEEP
6144:fWnWvfcpl9xgikkJA3PrPYSA5184k2FYBmVug7IaS0x:O2fCl9aiu7wQz20pRs
Malware Config
Signatures
Files
-
b19a97fa6b791fb563c7b0c2951429ec0bbaa0f4a7f5b080e12391d989b9299c.exe windows x86
992e1d6cbde1c1cbe30e79b0fa4071bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
SetLocalTime
GetLocaleInfoA
RemoveDirectoryA
SetLastError
ReleaseMutex
CancelIo
GetDriveTypeW
GetFileAttributesA
ResetEvent
HeapSize
VirtualProtect
GetProcessHeap
GetModuleHandleA
CreateDirectoryA
MapViewOfFile
CreateMailslotA
IsBadWritePtr
GetStdHandle
DeleteFileA
WriteFile
user32
SetCursor
GetWindowLongW
DestroyMenu
LoadCursorA
GetCapture
SetFocus
DispatchMessageA
wsprintfA
PeekMessageA
GetWindowTextW
LoadImageA
GetCaretPos
PostMessageW
filemgmt
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ