Static task
static1
Behavioral task
behavioral1
Sample
b0b3897be868db570f7f0fc376552fcb0b9387947fda6f146fd0fc0afee11d6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0b3897be868db570f7f0fc376552fcb0b9387947fda6f146fd0fc0afee11d6c.exe
Resource
win10v2004-20220812-en
General
-
Target
b0b3897be868db570f7f0fc376552fcb0b9387947fda6f146fd0fc0afee11d6c
-
Size
344KB
-
MD5
29620935133b86ce22b95c530f290361
-
SHA1
5697d85e48a520e3754b7200b64de01460fe543f
-
SHA256
b0b3897be868db570f7f0fc376552fcb0b9387947fda6f146fd0fc0afee11d6c
-
SHA512
ea0fa70cf98dbc376a7a2e6424cb7603a29bfda361694fdc4e01a2bddda28d35b6fac41d8a9571781bfebaaced9d12a7fe51f98fabe26fe5cb962cbe66a52c49
-
SSDEEP
6144:Msmof8DpTyf/SiQikBPms4bUP3KsGtEgTEwfjFpLZ3OXJMD:MsBninxms4UPasGtewHZOJw
Malware Config
Signatures
Files
-
b0b3897be868db570f7f0fc376552fcb0b9387947fda6f146fd0fc0afee11d6c.exe windows x86
47eda94d553e18740697c0dda5cb8536
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleHandleA
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ