Static task
static1
Behavioral task
behavioral1
Sample
b2f3b863f8ecb00b1709ef9844296c2ac242311a9c6b1d13128dfba695d3350c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2f3b863f8ecb00b1709ef9844296c2ac242311a9c6b1d13128dfba695d3350c.exe
Resource
win10v2004-20221111-en
General
-
Target
b2f3b863f8ecb00b1709ef9844296c2ac242311a9c6b1d13128dfba695d3350c
-
Size
60KB
-
MD5
817b68367e1e1acf1e93e2526d995d56
-
SHA1
fe6dee41dd9ded03f19408f51623b0d31bca554a
-
SHA256
b2f3b863f8ecb00b1709ef9844296c2ac242311a9c6b1d13128dfba695d3350c
-
SHA512
085cef9af5a6784e2f1be7da160ea638e0b683b4a17f08a0f4ecc0b021a7f6704ac85d2b3e6aa454760c233dac313e76d3a1d7ac01b421d73b99b73b0f289a76
-
SSDEEP
768:temVPixLYGDWmMw1aPsGucDpS1cItzQQJ7:tALoCrG6tzD
Malware Config
Signatures
Files
-
b2f3b863f8ecb00b1709ef9844296c2ac242311a9c6b1d13128dfba695d3350c.exe windows x86
100c73c45f8ffbaa6f2c7ccc78955c36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
MakeSureDirectoryPathExists
kernel32
GetVersionExA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
CloseHandle
WriteFile
CreateFileA
ReadFile
GetFileSize
SetFilePointer
Sleep
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ