Static task
static1
Behavioral task
behavioral1
Sample
b23b7ce8cd6c4bf9964076a00b5bd5bd726503954e6b61897071ab16839baeee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b23b7ce8cd6c4bf9964076a00b5bd5bd726503954e6b61897071ab16839baeee.exe
Resource
win10v2004-20221111-en
General
-
Target
b23b7ce8cd6c4bf9964076a00b5bd5bd726503954e6b61897071ab16839baeee
-
Size
924KB
-
MD5
19b378ac6e023c8ff9d58e0ce9e93de0
-
SHA1
1cf13b581390a683dd38e03aecf9e625393905a8
-
SHA256
b23b7ce8cd6c4bf9964076a00b5bd5bd726503954e6b61897071ab16839baeee
-
SHA512
509b897e9b0bfc19dd6e136deac15a654def7e44bbe34124b304a80696b1d01dcdfb716f72793ab9a4dbb94e2dde09490a89c47a7a62f7161e19f5a399ea17d0
-
SSDEEP
12288:qyUF7rGNrkty0fkhAlmvqRVB7rGNrkty0fkhAlmv2NaB:qyUFErmyFAeqRErmyFAe2Na
Malware Config
Signatures
Files
-
b23b7ce8cd6c4bf9964076a00b5bd5bd726503954e6b61897071ab16839baeee.exe windows x86
9feb7db1d41e0fb4bc421a5f9e300302
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessIoCounters
GetModuleHandleW
GetCurrentProcess
GetEnvironmentVariableW
GetProcAddress
WideCharToMultiByte
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetModuleFileNameW
MultiByteToWideChar
FreeLibrary
ReadFile
LoadLibraryExW
CreateFileW
GetLastError
CloseHandle
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess
user32
MessageBoxW
mozcrt19
memset
fclose
sprintf
strlen
_wfopen
_snwprintf
??3@YAXPAX@Z
_wfullpath
wcscpy
??2@YAPAXI@Z
fgets
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
??_U@YAPAXI@Z
strrchr
wcslen
getenv
_stricmp
_snprintf
_vsnwprintf
strcpy
??_V@YAXPAX@Z
_putenv
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 870KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eujbzbc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE