Static task
static1
Behavioral task
behavioral1
Sample
b847a6fe9535d6ecc5317e25bc3a61c3e6502c680923ca26a77ca79854161f2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b847a6fe9535d6ecc5317e25bc3a61c3e6502c680923ca26a77ca79854161f2c.exe
Resource
win10v2004-20220812-en
General
-
Target
b847a6fe9535d6ecc5317e25bc3a61c3e6502c680923ca26a77ca79854161f2c
-
Size
50KB
-
MD5
955d9a38f0dfe5bf5f3016d21ef4e9f5
-
SHA1
529bfcee9959c305595c16f9334ee3e3f233c874
-
SHA256
b847a6fe9535d6ecc5317e25bc3a61c3e6502c680923ca26a77ca79854161f2c
-
SHA512
0e715729cbf8d86e5d390ae0fa7d5088b3595e261de75543e375d0209c9c7a41cc3ca3fa7cf99044eede64199b97395eb6b70113274f5807a2c7a29d33314b62
-
SSDEEP
768:i2uoertHvHtXIYSrAZti6AMBqO8PllEgkMiw0QIsF0YbyK2bFN:i2uRtHvVZSMZx789lEgkM30QhF0rN
Malware Config
Signatures
Files
-
b847a6fe9535d6ecc5317e25bc3a61c3e6502c680923ca26a77ca79854161f2c.exe windows x86
d77d5c2f7dd7bf1a703047b7ccefb656
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
ExitProcess
CloseHandle
WideCharToMultiByte
SetHandleCount
GetOEMCP
SetStdHandle
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
Sleep
GetCPInfo
GetACP
SetFilePointer
WriteFile
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
HeapFree
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
user32
wsprintfA
MessageBoxA
advapi32
RegCreateKeyExA
RegSetValueExA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 943B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE