Static task
static1
Behavioral task
behavioral1
Sample
b115e6e1ff1c584481ad95804cae01328e3ac463787805bbb0a89d872a2dd0cb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b115e6e1ff1c584481ad95804cae01328e3ac463787805bbb0a89d872a2dd0cb.exe
Resource
win10v2004-20220901-en
General
-
Target
b115e6e1ff1c584481ad95804cae01328e3ac463787805bbb0a89d872a2dd0cb
-
Size
34KB
-
MD5
3e4cb523e619222596388bd3d03ded89
-
SHA1
e587c56d92126be86dad711683407193298e0fc8
-
SHA256
b115e6e1ff1c584481ad95804cae01328e3ac463787805bbb0a89d872a2dd0cb
-
SHA512
9eb7ba4f0cdbb651f5a95b281fe9ef34064d36903f10e025e4aad772f31ac4fd5ed19389441d953fc2895678bcc173e82b506ab14ca6eac278e2b7ae914eeb62
-
SSDEEP
768:3JA13j9X4GJczN6mA7Va7n9HOEmMLwOJch+EMFdmvZmdWnVAaHe:3JA13j9X7Jc4Z7Va7lmMcOxEr/He
Malware Config
Signatures
Files
-
b115e6e1ff1c584481ad95804cae01328e3ac463787805bbb0a89d872a2dd0cb.exe windows x86
5b064e0c0310a600f472bacbd0485021
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CloseHandle
LoadLibraryA
VirtualAlloc
Sleep
GetStartupInfoA
GetThreadPriority
FreeLibrary
GetCommandLineA
GetCurrentThreadId
ExitProcess
GetCurrentProcessId
GetCurrentThread
GetFileType
GetProcessTimes
GetFileAttributesA
SwitchToThread
GetLastError
GetModuleHandleA
GetCurrentProcess
ExitThread
user32
GetFocus
GetWindowLongA
GetActiveWindow
GetDC
GetSystemMetrics
GetWindowTextLengthA
GetWindow
ReleaseDC
UpdateWindow
GetForegroundWindow
BeginPaint
GetWindowTextA
CreateWindowExA
ShowWindow
IsWindowVisible
OpenIcon
RegisterClassA
GetClassLongA
GetWindowDC
advapi32
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
IsTextUnicode
RegCloseKey
RegCreateKeyExA
version
GetFileVersionInfoA
VerQueryValueA
VerLanguageNameA
GetFileVersionInfoSizeA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ