Static task
static1
Behavioral task
behavioral1
Sample
b0eafe3abfac5f3c3601c173ee7aaeb2f7f2ac9d309e5c98a9ad9ed29b8e8e6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0eafe3abfac5f3c3601c173ee7aaeb2f7f2ac9d309e5c98a9ad9ed29b8e8e6d.exe
Resource
win10v2004-20221111-en
General
-
Target
b0eafe3abfac5f3c3601c173ee7aaeb2f7f2ac9d309e5c98a9ad9ed29b8e8e6d
-
Size
299KB
-
MD5
01094120b7fb2a1901557dc05bae6c2b
-
SHA1
c085a4e081d1b9ae3e1e7f6678e479a06e8ae2c9
-
SHA256
b0eafe3abfac5f3c3601c173ee7aaeb2f7f2ac9d309e5c98a9ad9ed29b8e8e6d
-
SHA512
43687a6112807a0c98680643e4ec0dcd7c972e0459d53fd5a22a94118c69e64171f6980ff5fb49d769ae52e29350ea7b888980cf9eec69e1021499e50a94f8f9
-
SSDEEP
6144:uioxLOr7h2+7FtBdBYxp56sgkx9WC9qfN9BpR3aqYHlZ:zoxCr7/7F7IN6sRxwC94N9xaXlZ
Malware Config
Signatures
Files
-
b0eafe3abfac5f3c3601c173ee7aaeb2f7f2ac9d309e5c98a9ad9ed29b8e8e6d.exe windows x86
46ce9809ff80e351bd42ee3c9cf145d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GlobalFree
CloseHandle
GetPrivateProfileIntA
CreateEventW
GetSystemInfo
CreateMutexW
GetEnvironmentVariableA
ResetEvent
ReleaseMutex
LocalSize
GetCommandLineW
FreeConsole
WriteFile
SuspendThread
VirtualAllocEx
lstrlenA
InterlockedExchange
LocalFree
GetStdHandle
advapi32
InitializeSid
RegDeleteValueA
RegCloseKey
CloseEventLog
RegQueryValueW
RegEnumKeyA
CreateServiceW
IsValidSid
RegCreateKeyExW
IsTextUnicode
ClearEventLogW
IsValidSecurityDescriptor
ControlService
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ