Static task
static1
Behavioral task
behavioral1
Sample
b19b1ae961b80f4c7406b4e26378f1a755c694683807d58c8561f57f9e62e31a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b19b1ae961b80f4c7406b4e26378f1a755c694683807d58c8561f57f9e62e31a.exe
Resource
win10v2004-20220901-en
General
-
Target
b19b1ae961b80f4c7406b4e26378f1a755c694683807d58c8561f57f9e62e31a
-
Size
370KB
-
MD5
c0f70a830d665944e96a9f07d0e7b4f9
-
SHA1
8adff63421508d314db29a3089994e01db462e73
-
SHA256
b19b1ae961b80f4c7406b4e26378f1a755c694683807d58c8561f57f9e62e31a
-
SHA512
d9360de34d8cc43f9a11b7306e8672c710e5bc4047741eac692000287ea0213cb67716ec6843952952e49f1b6fb10b4cc0ac1020f191161313c66c27871fc2ef
-
SSDEEP
6144:KteD6qkHyV4W252llvvLk7CrOO1jOCUkprEEhESZFdRgEyIUaBK4:KteDJkSV+E73LpoEK4xgEbo4
Malware Config
Signatures
Files
-
b19b1ae961b80f4c7406b4e26378f1a755c694683807d58c8561f57f9e62e31a.exe windows x86
871f566131c40f544851d687e3ef38f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
user32
MessageBoxA
Sections
Size: 26KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ľ������ Size: 51B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SoftComp Size: 977B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 249B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE