Static task
static1
Behavioral task
behavioral1
Sample
b1de04be92af6b3809871bf3b7995327beee187c71e82509c7cfae2379db0d3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1de04be92af6b3809871bf3b7995327beee187c71e82509c7cfae2379db0d3d.exe
Resource
win10v2004-20221111-en
General
-
Target
b1de04be92af6b3809871bf3b7995327beee187c71e82509c7cfae2379db0d3d
-
Size
194KB
-
MD5
839909392a3ea30f804e8b13ddabb6f4
-
SHA1
c8864b9575d5fcad17e6e92f52efe1db06fe4c4d
-
SHA256
b1de04be92af6b3809871bf3b7995327beee187c71e82509c7cfae2379db0d3d
-
SHA512
069f2866a6c4cd43a4fad976da8f63d82271065adf184418df9a34581474945ec248d02dd8a839d3b4f4fa94b8c335507280802146e5314975b811182798fbcf
-
SSDEEP
3072:y0IYyM78ZaNCYpRj5csO82V078mp4PQwE87mqPCEne1iUaH/LBHMUeBT31dL3xox:ZpRek2V0J4It8XCl1ipfLBshTl1jm
Malware Config
Signatures
Files
-
b1de04be92af6b3809871bf3b7995327beee187c71e82509c7cfae2379db0d3d.exe windows x86
5b00185295c8dad748de15da653fe1b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIsinh
longjmp
fopen
_setjmp3
fclose
malloc
free
strlen
exit
__p__iob
fprintf
sprintf
fwrite
fflush
ferror
getenv
sscanf
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
DeleteFileA
HeapFree
TlsGetValue
HeapAlloc
TlsSetValue
TlsAlloc
HeapReAlloc
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE