Static task
static1
Behavioral task
behavioral1
Sample
b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db.exe
Resource
win10v2004-20220812-en
General
-
Target
b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db
-
Size
368KB
-
MD5
ae720ae6b6439ec5eddcf65a1a8e55d7
-
SHA1
cf49a7da10aa7c5942cd688c02a31ae9ec68dc5d
-
SHA256
b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db
-
SHA512
41a984b44f58f48fe5a1955fc1b99c061f7c44f9f9fa7f2b76d981890ec0eeccbd366c213e675dfcf77e163c8d6ffd997ea0f5bd0095bf587035356b91a2b6a7
-
SSDEEP
6144:FORMrShrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:FORMQrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db.exe windows x86
18cbbfee9a4533d173bcd512cc91d994
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateEventW
GetCurrentThreadId
SetEvent
ResumeThread
LocalFree
EnterCriticalSection
TlsGetValue
GetDriveTypeW
FindClose
SetLastError
lstrlenW
GetConsoleAliasW
GetPrivateProfileStringW
GetCurrentProcessId
FindAtomW
HeapCreate
ReadFile
EnumCalendarInfoW
GetNumberFormatW
user32
GetKeyboardType
CallWindowProcW
IsWindow
DispatchMessageA
GetMenuInfo
SetFocus
GetSysColor
GetCursorInfo
GetClassInfoA
GetKeyState
GetClientRect
DispatchMessageA
DrawTextA
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ