Static task
static1
Behavioral task
behavioral1
Sample
b04b834d2769013602787b44974d899c48e90a3ce66a8afd5b00e0069737959b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b04b834d2769013602787b44974d899c48e90a3ce66a8afd5b00e0069737959b.exe
Resource
win10v2004-20221111-en
General
-
Target
b04b834d2769013602787b44974d899c48e90a3ce66a8afd5b00e0069737959b
-
Size
156KB
-
MD5
3b1af9f9c190fed06638af58d3bfde80
-
SHA1
cc20ba9fbb07bf4668d6167990e1a20436d34255
-
SHA256
b04b834d2769013602787b44974d899c48e90a3ce66a8afd5b00e0069737959b
-
SHA512
db8d0287d74734666e2d8e3549e4cd66f5ccebffb97cbb4746d0ec7ea64853934f409afdea7b2fe9363b5500b77c53d133c066a73e5d7afd38b12284bb325d6e
-
SSDEEP
3072:YiMjSoaNzWScAOEHgU/kU0A2mDD5z4HFJeiSCm4GofgRfV6HMx4WoX:zo8CLYGArdz4aVCBF+Y
Malware Config
Signatures
Files
-
b04b834d2769013602787b44974d899c48e90a3ce66a8afd5b00e0069737959b.exe windows x86
a2b0d2394b73d4814afb65ca5932b902
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
EnumSystemLocalesA
FindNextChangeNotification
LocalShrink
CallNamedPipeW
GetStartupInfoW
CreateFileA
DosDateTimeToFileTime
CreateMailslotW
GetLogicalDriveStringsA
_lread
SetErrorMode
GetProfileStringW
lstrcmpiA
GetCurrentDirectoryW
GetCurrentThread
WriteConsoleW
FindResourceW
GetProcessPriorityBoost
FillConsoleOutputCharacterA
CreateDirectoryExA
GetDateFormatA
GlobalFindAtomW
GetLocaleInfoA
CancelIo
GetFileType
lstrcatA
EnterCriticalSection
FindResourceExW
RequestWakeupLatency
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetStringTypeW
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
mouse_event
WaitForInputIdle
FrameRect
DialogBoxIndirectParamW
GetClassInfoExA
ModifyMenuA
CallWindowProcW
EndDialog
GetUpdateRect
GetParent
SetProcessWindowStation
WinHelpA
GetClientRect
LoadBitmapA
CharToOemBuffW
SetClipboardData
MapVirtualKeyA
SetMenuItemInfoA
DestroyCaret
AppendMenuW
GetWindowWord
SetWindowsHookW
GetClassInfoExW
GetWindowRect
DdeAddData
DrawMenuBar
UnhookWinEvent
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE