Static task
static1
Behavioral task
behavioral1
Sample
2b1bd481a65384b3971b1d29501c7916d8d9c2ffe1bc52364c1de59f5b10aed8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b1bd481a65384b3971b1d29501c7916d8d9c2ffe1bc52364c1de59f5b10aed8.exe
Resource
win10v2004-20220812-en
General
-
Target
2b1bd481a65384b3971b1d29501c7916d8d9c2ffe1bc52364c1de59f5b10aed8
-
Size
767KB
-
MD5
0dc316a4ba3ecb261a949cd64f779c21
-
SHA1
9f87480177336042d97a81d91887bcbf66f89843
-
SHA256
2b1bd481a65384b3971b1d29501c7916d8d9c2ffe1bc52364c1de59f5b10aed8
-
SHA512
a686fad1db4d55e3e7428d5b8852e2c1d66607ccc199970c6a76863c5d98c014061b4576c22afcdae669f380530ae2a402a9fdb6aafe4f3b341ef055d865b749
-
SSDEEP
12288:cT2JGycCdM13x9pViZI7ELlkmBlufIwAie4VE7GgBgNhbwzHMsoUsELt:c8+oquQELiPxnGfqhbwTAEL
Malware Config
Signatures
Files
-
2b1bd481a65384b3971b1d29501c7916d8d9c2ffe1bc52364c1de59f5b10aed8.exe windows x86
5dcddaaeef18b71621343a4bcb814751
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
GetVersion
CloseHandle
Sleep
CloseHandle
HeapSize
DeleteFileA
VirtualProtectEx
CreateFileMappingW
ReleaseSemaphore
ReleaseMutex
WriteFile
GetFileSize
RemoveDirectoryW
lstrlenA
HeapDestroy
CreateMutexA
GetStdHandle
CreateDirectoryW
CreateFileA
GetCommandLineW
RemoveDirectoryW
WriteConsoleW
OpenEventW
LoadLibraryA
user32
FindWindowA
IsWindow
DestroyMenu
PeekMessageA
DrawTextW
CreateIcon
DispatchMessageA
GetClassInfoA
GetSysColor
GetWindowLongA
MessageBoxA
IsZoomed
DestroyMenu
eventcls
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE