Static task
static1
Behavioral task
behavioral1
Sample
b5198775e77cce7a4a19d7f8cb96a1e898b9c4e49742a4f57598cc8d93f76d15.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b5198775e77cce7a4a19d7f8cb96a1e898b9c4e49742a4f57598cc8d93f76d15.exe
Resource
win10v2004-20220812-en
General
-
Target
b5198775e77cce7a4a19d7f8cb96a1e898b9c4e49742a4f57598cc8d93f76d15
-
Size
202KB
-
MD5
d8ecd7d8bca9cf2e581067ca845d32c0
-
SHA1
00692be3264dfe500752a078fb0c03fae4647821
-
SHA256
b5198775e77cce7a4a19d7f8cb96a1e898b9c4e49742a4f57598cc8d93f76d15
-
SHA512
0014cd9a63df2f84bd750ede2f4f38f962ec53279d70bb53268ab3b302874a9c3c11b944f85e3db1ab280897d794d9e0b5d266bf3a81bd8dab826e19bfff24de
-
SSDEEP
3072:M8ymA7w8n0032MnkYi3nCrORTVkjW0lexDYA/wLsYaEBeX:M8yxV005kL3nQOxK6YdOsU
Malware Config
Signatures
Files
-
b5198775e77cce7a4a19d7f8cb96a1e898b9c4e49742a4f57598cc8d93f76d15.exe windows x86
821ee3a4cf08f3c205e471cd587d42a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetComputerNameA
GetStringTypeExA
GetComputerNameExA
lstrlen
RemoveDirectoryA
EnumResourceTypesA
ShowConsoleCursor
CopyFileExA
IsBadHugeReadPtr
PurgeComm
EnumTimeFormatsA
GetConsoleAliasesLengthA
CreateDirectoryA
GetConsoleAliasExesA
GetProcessId
SetConsolePalette
SetEndOfFile
SetFileAttributesA
lstrlenA
GetSystemDirectoryA
GetDriveTypeA
FatalExit
CloseConsoleHandle
GetBinaryTypeA
CreateDirectoryExW
GetModuleHandleA
GetDllDirectoryA
LoadLibraryExW
HeapSummary
VirtualAlloc
SetupComm
WriteConsoleInputA
GetLocalTime
GetFileSizeEx
IsValidLocale
Toolhelp32ReadProcessMemory
SetConsoleMaximumWindowSize
GetEnvironmentVariableW
GetDiskFreeSpaceExA
FindAtomA
LCMapStringA
GetDiskFreeSpaceA
SetPriorityClass
DisconnectNamedPipe
OpenSemaphoreA
GetProcessShutdownParameters
GetEnvironmentVariableA
GetFileInformationByHandle
SetFilePointerEx
ResetEvent
SetConsoleNumberOfCommandsA
SystemTimeToFileTime
LocalShrink
GetThreadPriorityBoost
FindAtomA
WaitNamedPipeA
CreateMutexA
ReleaseSemaphore
CreateWaitableTimerA
ReadConsoleInputA
IsBadStringPtrA
GlobalUnWire
SearchPathA
GetConsoleHardwareState
HeapWalk
GetVolumePathNameA
GetProcessTimes
GetNamedPipeHandleStateA
ReadConsoleOutputAttribute
CloseHandle
QueryDosDeviceA
advapi32
QueryUsersOnEncryptedFile
crtdll
_CIcos
_CIsin
opengl32
glRasterPos2i
Sections
CODE Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ