Static task
static1
Behavioral task
behavioral1
Sample
b718aaa863d449d9fa38ad9be9ae0f5596d8e93c1b37f054bc0f52b917909d5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b718aaa863d449d9fa38ad9be9ae0f5596d8e93c1b37f054bc0f52b917909d5b.exe
Resource
win10v2004-20220812-en
General
-
Target
b718aaa863d449d9fa38ad9be9ae0f5596d8e93c1b37f054bc0f52b917909d5b
-
Size
863KB
-
MD5
b76531c82c0aed532e85a6991e055f87
-
SHA1
ce09391de98d91bc7d63d6c034d996bbc7cc4d51
-
SHA256
b718aaa863d449d9fa38ad9be9ae0f5596d8e93c1b37f054bc0f52b917909d5b
-
SHA512
eb3cbec77132af4092bd71e1af2360875d294183b9ceb7274a60bf1756033ef2231a8bc867fbb8df30d497c4fcc3589ddccbfabcbc67374f1113b9167b81560d
-
SSDEEP
12288:CWGHOjOpOcMvGf1lq9Txj2HbGXpkG7wtLrv6GbAUBYLioSbDFcoTjA/POg:ZOUcMv6oVj2HPGEd6pUdoSbqsjOl
Malware Config
Signatures
Files
-
b718aaa863d449d9fa38ad9be9ae0f5596d8e93c1b37f054bc0f52b917909d5b.exe windows x86
97627dad267a03eff7e84cfdfe7b363f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetProcessTimes
GetCurrentProcessId
SetLastError
CreateMailslotA
EnumCalendarInfoW
GetModuleHandleA
ReadFile
GetDriveTypeW
FindClose
GetFileAttributesA
GlobalFree
FindAtomA
GetModuleFileNameA
EnterCriticalSection
LocalFree
GetCurrentThreadId
GetPriorityClass
GetPrivateProfileStringW
SuspendThread
user32
GetWindowLongA
GetSysColor
GetKeyboardType
GetWindowInfo
DispatchMessageA
GetClientRect
IsWindow
DispatchMessageA
GetClassInfoA
SetFocus
DrawTextW
GetKeyState
CallWindowProcW
colbact
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
desk.cpl
DeskSetCurrentScheme
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 853KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ