Static task
static1
Behavioral task
behavioral1
Sample
b3b6f02227ad2d2af7a786e9e62c53d636a35bd7708ec6e5030e495da0ed7f8c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b3b6f02227ad2d2af7a786e9e62c53d636a35bd7708ec6e5030e495da0ed7f8c.exe
Resource
win10v2004-20221111-en
General
-
Target
b3b6f02227ad2d2af7a786e9e62c53d636a35bd7708ec6e5030e495da0ed7f8c
-
Size
67KB
-
MD5
e1a76470037f6e01e9fcf81cc3e4c9ba
-
SHA1
f25872b7f0986ade6eb1d360f2b44ed3e121c000
-
SHA256
b3b6f02227ad2d2af7a786e9e62c53d636a35bd7708ec6e5030e495da0ed7f8c
-
SHA512
feb84c4fb35f324218d5d851af564291bfed44e2e236c56356ff93c820cfe2fd282db845a8f1a29f5399c8e7b371120067cd6402ad03289666692d1ecb8362bf
-
SSDEEP
1536:FVI0moOmwmJyy3AeH1VUD61+cVyht3IIAA0g+usfwgw0PN74uHxFEUE9aCK:FVAoOmwgAxm1+cVyht90Xfw2N74uRAK
Malware Config
Signatures
Files
-
b3b6f02227ad2d2af7a786e9e62c53d636a35bd7708ec6e5030e495da0ed7f8c.exe windows x86
da11bdfb1d4e06ccd2988e5dbb7c26c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BackupRead
GetThreadLocale
InterlockedExchangeAdd
WriteConsoleInputVDMW
SearchPathA
GetLogicalDriveStringsW
SetConsoleCursorMode
WriteProfileSectionA
GetCommModemStatus
DecodePointer
GetPrivateProfileSectionNamesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 52KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE