Static task
static1
Behavioral task
behavioral1
Sample
b1b89f558f40dcf95d8b828820522110230a3b5b6a8fba7c2eb536d298847587.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1b89f558f40dcf95d8b828820522110230a3b5b6a8fba7c2eb536d298847587.exe
Resource
win10v2004-20221111-en
General
-
Target
b1b89f558f40dcf95d8b828820522110230a3b5b6a8fba7c2eb536d298847587
-
Size
115KB
-
MD5
9b5360e45f29f293a4c0bc474abf95d5
-
SHA1
2cdade933ee267e0aea70000fb6aded70f2420ef
-
SHA256
b1b89f558f40dcf95d8b828820522110230a3b5b6a8fba7c2eb536d298847587
-
SHA512
a5211a92b5436bf846c1b7f99b956ac82650439ea30032b6f01e9f470a309a995134217e3222622038959634278be2763d7d0787096bb88f86082467ca73a630
-
SSDEEP
3072:dNdlrGGCbF/pCLiNzqzKn3esQRsuWkThWxNx1eP+i:dDlrYweNOzK3eLGutlWnx1ePb
Malware Config
Signatures
Files
-
b1b89f558f40dcf95d8b828820522110230a3b5b6a8fba7c2eb536d298847587.exe windows x86
2a493b76e32317c54576416e82105254
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateEventA
DefineDosDeviceA
ExitProcess
FindAtomA
FindClose
FreeConsole
GetAtomNameA
GetCommandLineA
GetConsoleOutputCP
GetDiskFreeSpaceExA
GetExitCodeProcess
GetFileAttributesA
GetFileTime
GetFileType
GetModuleHandleA
GetProcAddress
GetProfileSectionA
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetUserDefaultLangID
GlobalUnWire
GlobalUnfix
GlobalUnlock
HeapFree
InitAtomTable
IsBadReadPtr
IsProcessorFeaturePresent
LocalLock
LocalSize
MapViewOfFile
PulseEvent
QueueUserAPC
ReleaseSemaphore
ResetEvent
SearchPathA
SetUnhandledExceptionFilter
VirtualFree
WaitForMultipleObjectsEx
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputs
free
malloc
memset
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE