Static task
static1
Behavioral task
behavioral1
Sample
0b999706b0cc8a419487f0d5e2d3d5d68861e74b770910232fcaeb7583af9bdc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0b999706b0cc8a419487f0d5e2d3d5d68861e74b770910232fcaeb7583af9bdc.exe
Resource
win10v2004-20220812-en
General
-
Target
0b999706b0cc8a419487f0d5e2d3d5d68861e74b770910232fcaeb7583af9bdc
-
Size
811KB
-
MD5
a6b733ffaac18b7f687ec67eeb02c7d3
-
SHA1
ab453c0b67753d44ce4c6ee04a942999387bb77b
-
SHA256
0b999706b0cc8a419487f0d5e2d3d5d68861e74b770910232fcaeb7583af9bdc
-
SHA512
6f320f7ffe94f51ce1c63b4922f174bc5fac2252cbee70f7b659dae629c7b5f5bf4b405165c1009308ca429ed1f13cce497a4b0baf042c0ae8b8844a0282b946
-
SSDEEP
24576:60NNwTteJzo1ly1ePf1/yjN9OXqiZoesO0Aftfb4:zOZe1wlppyjN9OXZoJKz
Malware Config
Signatures
Files
-
0b999706b0cc8a419487f0d5e2d3d5d68861e74b770910232fcaeb7583af9bdc.exe windows x86
187576b0080626cfaa6a32040283248e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sleep
GlobalFree
LeaveCriticalSection
GetConsoleMode
CreateFileA
WriteConsoleW
GetModuleFileNameA
GetCommandLineW
GetDriveTypeA
GetFileSize
GetLocalTime
lstrlenW
VirtualProtectEx
CreateDirectoryW
FindClose
DeleteFileA
GetStartupInfoA
CloseHandle
InitializeCriticalSection
GetCalendarInfoW
EnterCriticalSection
RemoveDirectoryA
TlsGetValue
GetTickCount
user32
FillRect
GetWindowLongA
DispatchMessageA
EqualRect
IsWindowVisible
PeekMessageA
MessageBoxA
GetWindowLongA
GetSysColor
GetWindowDC
IsWindowEnabled
wsprintfA
IsWindow
cryptdlg
CertConfigureTrustA
CertTrustCleanup
CertTrustCertPolicy
CertConfigureTrustW
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE