Static task
static1
Behavioral task
behavioral1
Sample
b2c0327998e35a0fcd333d3b2f342855ad1dcb467d7312559828f836b1f7f2c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2c0327998e35a0fcd333d3b2f342855ad1dcb467d7312559828f836b1f7f2c5.exe
Resource
win10v2004-20220901-en
General
-
Target
b2c0327998e35a0fcd333d3b2f342855ad1dcb467d7312559828f836b1f7f2c5
-
Size
80KB
-
MD5
bb08cad1462c01ad3beb9da223270f76
-
SHA1
635725d49eddb7e3b55b0c87b8866c0a0c003d05
-
SHA256
b2c0327998e35a0fcd333d3b2f342855ad1dcb467d7312559828f836b1f7f2c5
-
SHA512
28ca1deb58a0e7e14e036bc5e9ed49b34cac906cb84282e4c826ed2207b700a2af39205eca196d91aa858a2c5435ea64d8a143a16c085de7bcbec0fa9c8865cd
-
SSDEEP
1536:rEvjGcyGlyXSxcVPdGx9i3ZvuXbiMbOzku/OMVBybVHvBEoC:oLRyXZPK0uXOXAnMVBoVHvBEoC
Malware Config
Signatures
Files
-
b2c0327998e35a0fcd333d3b2f342855ad1dcb467d7312559828f836b1f7f2c5.exe windows x86
c791b8db48fe14388ba83d8bbf4dae45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
LoadResource
FindResourceW
GetCurrentProcessId
GetVersion
QueryPerformanceCounter
LockResource
GetModuleHandleA
DeviceIoControl
GetCPInfo
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeW
user32
LoadIconA
GetClientRect
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadStringA
DefWindowProcA
FindWindowA
DialogBoxParamA
DestroyWindow
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
wsprintfA
DrawTextA
GetSysColor
LoadCursorA
gdi32
TextOutA
Rectangle
CreateBitmap
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExW
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ