Static task
static1
Behavioral task
behavioral1
Sample
b1e96ccb8286feedf69d717bd8b94e7020a61092da8b67d8112d9b9bf8f5126d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1e96ccb8286feedf69d717bd8b94e7020a61092da8b67d8112d9b9bf8f5126d.exe
Resource
win10v2004-20220812-en
General
-
Target
b1e96ccb8286feedf69d717bd8b94e7020a61092da8b67d8112d9b9bf8f5126d
-
Size
55KB
-
MD5
43ded223fe5b2bf9f8c1fa6b7c3eebdf
-
SHA1
2bdb54b96a935f24faa2a7aa1a4fcec60bdc221c
-
SHA256
b1e96ccb8286feedf69d717bd8b94e7020a61092da8b67d8112d9b9bf8f5126d
-
SHA512
dfdfd7ac130644fe417128a6976676cb57215ea2941294607a7cc3a030308611e7b413f62d2c50a46b93dbc0a650c7d89f43b95bf633f27060b6d986045450ec
-
SSDEEP
768:IOJoaK3THbShZqcdQXbUvyVp5hsfZjMjxhUlmFNBF64YBL6pGdQKwKqECPUV5jAd:IOC5HOhwVLPV/jxhU4F3F64Yk8dD0c
Malware Config
Signatures
Files
-
b1e96ccb8286feedf69d717bd8b94e7020a61092da8b67d8112d9b9bf8f5126d.exe windows x86
9ccc635f3a3b50e775896314d4a0b47b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
LeaveCriticalSection
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
GetConsoleNlsMode
GetTempPathW
GetConsoleCP
ExitThread
OpenEventW
CancelTimerQueueTimer
CreateMutexW
GlobalAlloc
DeactivateActCtx
DeleteCriticalSection
ExitProcess
BeginUpdateResourceW
InterlockedExchange
ClearCommBreak
GetCurrentProcessId
DeleteTimerQueue
VirtualAlloc
CopyFileA
GetFileSize
AddAtomW
Sleep
GetUserDefaultLCID
GetModuleHandleW
ws2_32
select
closesocket
listen
bind
WSACleanup
socket
WSAStartup
msvcrt
_assert
_access
_cgetws
_c_exit
_atoi64
_atoldbl
_cabs
_beep
_close
_chdir
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE