Static task
static1
Behavioral task
behavioral1
Sample
0be1b754825996f675977c0b53a6d5bba4d53e7c8338c11ef4449c3571a606e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0be1b754825996f675977c0b53a6d5bba4d53e7c8338c11ef4449c3571a606e3.exe
Resource
win10v2004-20221111-en
General
-
Target
0be1b754825996f675977c0b53a6d5bba4d53e7c8338c11ef4449c3571a606e3
-
Size
798KB
-
MD5
7615a8c024eae45eec1a08b5a2a26dde
-
SHA1
c7d9872a70806d8dfd648712865e1e5e51084e9a
-
SHA256
0be1b754825996f675977c0b53a6d5bba4d53e7c8338c11ef4449c3571a606e3
-
SHA512
abf43908d10ddb735129875041432ed372073de8ea2d2a5cf3cd6efd78e4aaeb6db9854221269b59eefe74fe9d6d9f7f839f5660beb6137ee83b9976e1463d03
-
SSDEEP
12288:VRc9ZgQt0NVHPFx8qG6IySNN22DwRjhNHyQetn:VRc7gEIVvBG6Ir8uMjPHrin
Malware Config
Signatures
Files
-
0be1b754825996f675977c0b53a6d5bba4d53e7c8338c11ef4449c3571a606e3.exe windows x86
45e404f81e06984076cc1c9e10ee1cfd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
KillTimer
PostQuitMessage
kernel32
HeapAlloc
LCMapStringA
InterlockedIncrement
SetLastError
GetCurrentProcessId
GetCurrentThreadId
SetEndOfFile
FormatMessageA
VirtualFree
LoadResource
InitializeCriticalSection
WriteConsoleA
GetTimeZoneInformation
TerminateProcess
FreeLibrary
HeapCreate
FindFirstFileW
CloseHandle
WriteFile
SetFilePointer
GetStringTypeA
WideCharToMultiByte
GetFileType
GetProcAddress
GetCommandLineA
SetHandleCount
HeapSize
MultiByteToWideChar
UnhandledExceptionFilter
GetCPInfo
DeleteFileA
GetConsoleOutputCP
LocalAlloc
GetStringTypeW
GetCurrentProcess
LoadLibraryA
GetFileSize
GetModuleFileNameA
FlushFileBuffers
HeapDestroy
SetEvent
GetFileAttributesA
lstrlenA
UnmapViewOfFile
LCMapStringW
EnterCriticalSection
HeapFree
GetLastError
GetProcessHeap
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
RtlUnwind
InterlockedDecrement
LeaveCriticalSection
GetACP
GetOEMCP
HeapReAlloc
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 736KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE