Static task
static1
Behavioral task
behavioral1
Sample
0b2ea8ce50104efd40552a7423dd5fc8d02af0bf589ae52a3200f8115f09bd99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b2ea8ce50104efd40552a7423dd5fc8d02af0bf589ae52a3200f8115f09bd99.exe
Resource
win10v2004-20220812-en
General
-
Target
0b2ea8ce50104efd40552a7423dd5fc8d02af0bf589ae52a3200f8115f09bd99
-
Size
749KB
-
MD5
0585c6fe824f87eedeb4e39377c25694
-
SHA1
a8bcfdd6bd6b619344202ff375cf9ab256bcae35
-
SHA256
0b2ea8ce50104efd40552a7423dd5fc8d02af0bf589ae52a3200f8115f09bd99
-
SHA512
1b038f3b2176ad7b8b18f08defa970f1efed1cf797c6dd0b0bd5c9e1677bf7df169ebae1e86da32cc0f4ad0f75f915afb86742a1dcba579a7ad61c6dbe1ac089
-
SSDEEP
12288:ncA2tfD6NbMvK0BQIZtv/GYr3sp99FnvxrQ70dYR4qNM8geBx5iOKECyi7oEL:ncA2pJNBFZp/GYrw/1QPTMmu1oC
Malware Config
Signatures
Files
-
0b2ea8ce50104efd40552a7423dd5fc8d02af0bf589ae52a3200f8115f09bd99.exe windows x86
839547e7bf8cd965304e3bf30872771e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
GetLastError
OpenEventA
ReleaseSemaphore
WriteConsoleW
CreateFileA
GetDriveTypeA
HeapFree
lstrlenA
Sleep
GetFileType
VirtualProtect
RemoveDirectoryA
RemoveDirectoryA
CreateFileMappingW
SetStdHandle
FindClose
CreateDirectoryW
FindClose
ReleaseMutex
WriteFile
DeleteFileA
ResetEvent
GetModuleHandleA
GetCommandLineA
user32
FindWindowA
GetWindowLongA
IsZoomed
DispatchMessageA
CreateIcon
GetSysColor
DrawTextW
DestroyMenu
DestroyMenu
IsWindow
PeekMessageA
GetClassInfoA
MessageBoxA
dmloader
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ