Static task
static1
Behavioral task
behavioral1
Sample
b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039.exe
Resource
win10v2004-20221111-en
General
-
Target
b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039
-
Size
300KB
-
MD5
472edb1d1f5a25434e3c333600652aa8
-
SHA1
9a7e707ddd75bb0ca135f39d8d4869a0471a47e1
-
SHA256
b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039
-
SHA512
32bad60dba688d958ffc4d90a9473f3787dc6243856668f1440554bf18ad025e521c945d0c21aa9948116484dc81836e78b89adfb97193fe52520794103fc6ad
-
SSDEEP
6144:fFWnPekevsoKmOz/KURShu5flMy16wL+kCfjLwcfqMr/JWAsoYKZX0:MZSlKJK8991LikCfjLziuG
Malware Config
Signatures
Files
-
b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039.exe windows x86
67aaa4d40990220502e5649aad3f25cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryA
CreateMailslotW
GetModuleHandleA
ReleaseMutex
SetLastError
GetCommandLineA
ResetEvent
HeapSize
GetDriveTypeW
GetLocaleInfoA
GetFileAttributesA
RemoveDirectoryA
GetExitCodeThread
MapViewOfFile
GetProcessHeap
CancelIo
VirtualProtect
GetStdHandle
IsBadWritePtr
FindClose
FindResourceA
user32
GetWindowLongW
LoadImageW
IsDialogMessageA
DestroyMenu
GetWindowTextW
LoadCursorA
SetCursor
PeekMessageA
DispatchMessageA
PostMessageW
GetCapture
wsprintfA
SetFocus
ipsmsnap
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ