Static task
static1
Behavioral task
behavioral1
Sample
2b4bfc4ffbe39cfa902893fa5e064f399e8047f0c6df0d288d0250cfab39934f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b4bfc4ffbe39cfa902893fa5e064f399e8047f0c6df0d288d0250cfab39934f.exe
Resource
win10v2004-20221111-en
General
-
Target
2b4bfc4ffbe39cfa902893fa5e064f399e8047f0c6df0d288d0250cfab39934f
-
Size
511KB
-
MD5
2ad6dfdf409ef636344fb7c840d3c880
-
SHA1
6b9f68095a27aa9581778ffd19cb7fae963974ce
-
SHA256
2b4bfc4ffbe39cfa902893fa5e064f399e8047f0c6df0d288d0250cfab39934f
-
SHA512
1a440b2e5c3703d7e778eab9bf54b2ac990a1bb1e0cd592acb83bb4814f3ce4cab4aefb2d38ba47c8bba0dac4e19257d93b7bfa0aec2653ee971c8b05ccbdb66
-
SSDEEP
12288:ECiAzZtZdjiUYzvB4fL8tZTAW9ZfaUjbdxDDhd:/iiZDd+UYN4fi9SEfvh
Malware Config
Signatures
Files
-
2b4bfc4ffbe39cfa902893fa5e064f399e8047f0c6df0d288d0250cfab39934f.exe windows x86
7b52eed9dd0371daa97fdf79fa38f022
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CloseHandle
CreateFileA
SetLastError
GetCommandLineW
GetModuleFileNameA
DeleteFileW
GetEnvironmentVariableA
IsBadCodePtr
HeapCreate
GetModuleHandleA
Sleep
GetFileAttributesW
MapViewOfFile
HeapDestroy
GetStartupInfoA
GetStdHandle
TlsAlloc
SetEvent
TlsGetValue
user32
IsZoomed
DispatchMessageA
GetKeyState
GetWindowLongA
FindWindowA
DrawTextW
GetKeyState
CreateIcon
GetSysColor
CallWindowProcW
DestroyMenu
DispatchMessageA
GetClassInfoA
resutils
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
inetcpl.cpl
DllInstall
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 501KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ