Static task
static1
Behavioral task
behavioral1
Sample
b4c80dc9ffe2cff11e3c6372cc51960525889d7fae82e854c49153dd06e3a7a7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4c80dc9ffe2cff11e3c6372cc51960525889d7fae82e854c49153dd06e3a7a7.exe
Resource
win10v2004-20220812-en
General
-
Target
b4c80dc9ffe2cff11e3c6372cc51960525889d7fae82e854c49153dd06e3a7a7
-
Size
372KB
-
MD5
1e47f65bdaedd8ba728220e43adaa58c
-
SHA1
34796375e97538da1a5e7c38083eaee4a61d3a2d
-
SHA256
b4c80dc9ffe2cff11e3c6372cc51960525889d7fae82e854c49153dd06e3a7a7
-
SHA512
728c491c583b86f6355307b013e1f45d7c5a84a85d9ceb5f088919d9496b6dcdd7932b0a78cc28d53d25d9bde1ade9130e8c51d863d80ec4ea98ee94972a5cb2
-
SSDEEP
6144:KUMRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:rMneF8m4ewS/HcF+ih7wp10l1h+TxqM
Malware Config
Signatures
Files
-
b4c80dc9ffe2cff11e3c6372cc51960525889d7fae82e854c49153dd06e3a7a7.exe windows x86
b17e143dc94a6aff4b5604c0fcb28e01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleHandleW
FindVolumeClose
GlobalSize
ReleaseMutex
CloseHandle
VirtualAlloc
GetComputerNameW
GetDriveTypeA
GlobalFree
FreeConsole
SetEvent
CreateFileA
ExitThread
GetExitCodeProcess
ReadFile
GetPrivateProfileIntW
lstrlenA
GetLocalTime
LocalFree
user32
CreateWindowExA
EndDialog
CallWindowProcA
DispatchMessageA
GetClientRect
GetCaretPos
GetKeyState
DrawStateW
FillRect
GetDlgItem
GetMenu
GetClassInfoA
GetCursorInfo
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
msexch40
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ