Static task
static1
Behavioral task
behavioral1
Sample
0b839df90949187088b7895b80c3581aad2aac7047d21da67496d8bf34b922b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b839df90949187088b7895b80c3581aad2aac7047d21da67496d8bf34b922b1.exe
Resource
win10v2004-20221111-en
General
-
Target
0b839df90949187088b7895b80c3581aad2aac7047d21da67496d8bf34b922b1
-
Size
274KB
-
MD5
1a25253c1aa7129e8e00aa3ca8e1e0d0
-
SHA1
8e44c56b61ab9b9ccfa344c700113b8fd2cafeed
-
SHA256
0b839df90949187088b7895b80c3581aad2aac7047d21da67496d8bf34b922b1
-
SHA512
70ae803f2a466a93a0f384ba217bd9c32c9426eba555258ccd1aa2ff6e5facc1b4a17f6f6ccd0d547c1817bd8b5b5829d5d943763f87a236fa1bb339ac921afc
-
SSDEEP
6144:hbCX6abk+bqY74V/LzEBXCQogY9BikxpLqUatwT:hb1ZYmopCQii6itwT
Malware Config
Signatures
Files
-
0b839df90949187088b7895b80c3581aad2aac7047d21da67496d8bf34b922b1.exe windows x86
76caa9b67d83aa8d65f56c4df8876e41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
WideCharToMultiByte
GlobalFindAtomA
lstrlenW
GetCurrentProcess
CreateFileA
HeapAlloc
LoadLibraryW
FindResourceW
SetUnhandledExceptionFilter
lstrcpyW
MultiByteToWideChar
GetTickCount
GetSystemTimeAsFileTime
HeapFree
lstrcmpA
SetLastError
SystemTimeToFileTime
GetProcessHeap
CloseHandle
GetCurrentProcessId
QueryPerformanceCounter
GetLocalTime
psapi
EmptyWorkingSet
GetPerformanceInfo
GetProcessImageFileNameA
EnumProcessModules
EnumPageFilesW
EnumPageFilesA
olecli32
LeSetData
LeQueryOpen
LeGetUpdateOptions
LeQueryBounds
LeQueryOutOfDate
LeSaveToStream
LeSetBounds
LeObjectConvert
LeObjectLong
LeRelease
LeReconnect
Sections
.text Size: 269KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ