Static task
static1
Behavioral task
behavioral1
Sample
b1f37a23adaaf55406993b09a26363e0c19aad2d80f7d26ca35bf843268786f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1f37a23adaaf55406993b09a26363e0c19aad2d80f7d26ca35bf843268786f4.exe
Resource
win10v2004-20220812-en
General
-
Target
b1f37a23adaaf55406993b09a26363e0c19aad2d80f7d26ca35bf843268786f4
-
Size
17.4MB
-
MD5
e8c97dfc6f100f56a595b4120c39496a
-
SHA1
a4b69e33937a6411683dc094f25c6bc280b9ed97
-
SHA256
b1f37a23adaaf55406993b09a26363e0c19aad2d80f7d26ca35bf843268786f4
-
SHA512
c18a27c0cf7174cd3a7631e2db572850293a2fb715187a44570c9bdf871751d743326ddc3a4a1ec353f707f1dd3c5a8b89917b0471dd58c4c9b6b1df25d79c00
-
SSDEEP
393216:WzYIQ9nfu6/lA3N4TPPBWfwDP9w3rZO8vtI9S2VzO6TR0WxFk7:5u6/CNAhWV3vInR0W30
Malware Config
Signatures
Files
-
b1f37a23adaaf55406993b09a26363e0c19aad2d80f7d26ca35bf843268786f4.exe windows x86
126508d4d4a0912027501195b136a50b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileStructA
GetLastError
MoveFileA
VirtualAlloc
WriteProcessMemory
ReadConsoleOutputAttribute
msvcp60
_LEps
mbrlen
_LDenorm
_Mbrtowc
_Getcvt
_LInf
_Dscale
_FDscale
mbrtowc
_LXbig
_FDnorm
_LSinh
_Inf
_Dnorm
wctype
wcsrtombs
_Rteps
_LDscale
_Denorm
_Hugeval
_Getcoll
_Xbig
_FRteps
_FXbig
_Poly
_Wcrtomb
wctrans
_FDenorm
_Strxfrm
_Exp
_Snan
towctrans
_FInf
_FNan
_Getctype
btowc
_LRteps
_LCosh
_LDtest
_FCosh
_Cosh
_LExp
_Eps
_FExp
_Tolower
wcrtomb
_Toupper
_Stod
_Sinh
_FEps
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 489KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 14.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE