Static task
static1
Behavioral task
behavioral1
Sample
b030d4c6fbee63855bb421d8876c1346dded34e898fd997edaf62d6cca734d56.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b030d4c6fbee63855bb421d8876c1346dded34e898fd997edaf62d6cca734d56.exe
Resource
win10v2004-20220812-en
General
-
Target
b030d4c6fbee63855bb421d8876c1346dded34e898fd997edaf62d6cca734d56
-
Size
124KB
-
MD5
3d2223f930404642db35f813ac8d1886
-
SHA1
010c867d1fec25c1556a74a85a35a532c3328ae4
-
SHA256
b030d4c6fbee63855bb421d8876c1346dded34e898fd997edaf62d6cca734d56
-
SHA512
749a2e91a034d72542dd506531169789fcb73eabfdcfe50a17bee4aca0c9d87805c887aea1f72c45482ef7e4805207a1b404b455b72dc5ac17268f5cc8764034
-
SSDEEP
384:8IZRock9p5DPz2pbmX/qJ6xtJMzl26RcWV6NT61JlnzJF1+fztUm:LZRs9z25qjtJERcWV6p8JlnFux
Malware Config
Signatures
Files
-
b030d4c6fbee63855bb421d8876c1346dded34e898fd997edaf62d6cca734d56.exe windows x86
07db17c06be1a5e346337a863a930f0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetFilePointer
CreateThread
GetModuleHandleA
CreateDirectoryA
SetUnhandledExceptionFilter
ReleaseMutex
GetTempPathA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
MoveFileA
CopyFileA
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
SetLastError
lstrcmpiA
GetWindowsDirectoryA
lstrcpyA
FindResourceA
LoadResource
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
lstrlenA
MultiByteToWideChar
Sleep
ExitProcess
CreateMutexA
user32
SendMessageA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
LoadIconA
LoadCursorA
wsprintfA
CreateWindowExA
RegisterClassExA
advapi32
CloseServiceHandle
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
OpenSCManagerA
CreateServiceA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
LookupAccountNameA
StartServiceA
OpenServiceA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
GetFileSecurityA
msvcrt
_exit
_strnset
_strrev
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strtok
??2@YAPAXI@Z
strchr
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
realloc
malloc
strstr
??1type_info@@UAE@XZ
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
Sections
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ