Static task
static1
Behavioral task
behavioral1
Sample
b115dbe880571627eead8fcbbd3245bbf5868a598a01197d42d43616eb6cdbcf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b115dbe880571627eead8fcbbd3245bbf5868a598a01197d42d43616eb6cdbcf.exe
Resource
win10v2004-20220901-en
General
-
Target
b115dbe880571627eead8fcbbd3245bbf5868a598a01197d42d43616eb6cdbcf
-
Size
344KB
-
MD5
49d45501ecbee3099f41829ca95fc6fc
-
SHA1
16432b4b9d33e31ef37840c3d6dc4171c52e2fb6
-
SHA256
b115dbe880571627eead8fcbbd3245bbf5868a598a01197d42d43616eb6cdbcf
-
SHA512
883c316be4cfc8dafc17a902d73ed2239f22545e56ee2fa83a5c17176abca9a9c85b5f0625ebad71f2dcc37858549b8819f0a631d91a21aa2d0c3fc0c6873561
-
SSDEEP
6144:7sqB35FlXsDOknxe4+SAqsiDME1UihXAfG6JJCrI3c3EyDCwf17pgxUnmsVDnDQw:7jFh4OKepPSrZuGEsIYJp3nmUDnv
Malware Config
Signatures
Files
-
b115dbe880571627eead8fcbbd3245bbf5868a598a01197d42d43616eb6cdbcf.exe windows x86
eb0c6519e4b66af6630a006dbea2b6ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
SetFileAttributesA
ExitProcess
GetThreadPriority
GetCommandLineA
GetVersionExA
VirtualProtect
user32
EnableMenuItem
RemoveMenu
TabbedTextOutW
CharUpperA
GetQueueStatus
SystemParametersInfoW
SetCaretPos
TrackPopupMenuEx
EnumDisplaySettingsExW
GetMenu
CreateCursor
IsIconic
GetDlgCtrlID
SetClipboardData
SetThreadDesktop
OpenClipboard
SetForegroundWindow
SetDlgItemInt
GetWindowLongA
GetClassLongW
EnumDisplayMonitors
ScrollWindowEx
OemToCharA
ChangeMenuW
CreateDialogIndirectParamA
EnumDisplaySettingsW
CreateMenu
LoadKeyboardLayoutW
RegisterClipboardFormatA
GetUpdateRgn
CreateDesktopA
IsCharUpperA
SetMenuItemInfoA
IsZoomed
SetMenuItemBitmaps
DefFrameProcA
SendMessageTimeoutA
ChildWindowFromPoint
GetMenuItemCount
gdi32
SetMapMode
RestoreDC
RectInRegion
AddFontResourceW
TranslateCharsetInfo
GetRgnBox
comdlg32
GetOpenFileNameA
advapi32
AdjustTokenPrivileges
RegisterServiceCtrlHandlerW
RegCreateKeyExW
SetSecurityInfo
PrivilegeCheck
SetSecurityDescriptorDacl
RegDeleteKeyW
RegSaveKeyW
RegConnectRegistryA
AllocateLocallyUniqueId
DeregisterEventSource
CryptAcquireContextA
shell32
SHFileOperationW
ole32
OleCreateMenuDescriptor
OleLockRunning
CoRegisterClassObject
OleCreateLink
CoReleaseMarshalData
CLSIDFromString
oleaut32
LoadTypeLibEx
QueryPathOfRegTypeLi
comctl32
PropertySheetW
ImageList_BeginDrag
ImageList_Replace
shlwapi
PathGetCharTypeW
StrCmpW
StrStrW
PathUnquoteSpacesA
PathQuoteSpacesW
PathFindOnPathW
SHRegSetUSValueW
StrCpyW
PathCommonPrefixW
StrDupW
PathStripPathA
PathFileExistsA
StrDupA
UrlGetPartW
setupapi
SetupDiEnumDeviceInterfaces
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoW
Sections
BAEXks Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
WOUaE Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
oRAsZjP Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BbDAQ Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ