Static task
static1
Behavioral task
behavioral1
Sample
b0149979ccad76f545b2b8071af48cb95a6ae4d5a08cd2e95f60be9816077489.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0149979ccad76f545b2b8071af48cb95a6ae4d5a08cd2e95f60be9816077489.exe
Resource
win10v2004-20220812-en
General
-
Target
b0149979ccad76f545b2b8071af48cb95a6ae4d5a08cd2e95f60be9816077489
-
Size
1.4MB
-
MD5
e2c1d17bce384e9e51835ec4e96d042a
-
SHA1
cf640ca99d86211811d6fff9415c111da30d73fb
-
SHA256
b0149979ccad76f545b2b8071af48cb95a6ae4d5a08cd2e95f60be9816077489
-
SHA512
c5bd49701204b187be81627815c1a1586911fcdb448650bb4b847d859e66da4603a519ae1b2e5776a19bf3262094aeb2cb166e47d4e893230578d70f8f39b787
-
SSDEEP
12288:exoQwG6hRM2fGI+23Q4Thfi/n51NcM1glXdqP1nYKqLMR2ehthhz1JFazvH9KDAd:C6hRZf9b3NNKv5hSlXdqPeIFtT1ifp5/
Malware Config
Signatures
Files
-
b0149979ccad76f545b2b8071af48cb95a6ae4d5a08cd2e95f60be9816077489.exe windows x86
314a8e14a8d7f8fdce5ae404fa086d52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerifyVersionInfoA
FindNextVolumeMountPointA
SetComputerNameExA
GlobalFix
LZCloseFile
GetVersion
GetProfileIntA
IsProcessorFeaturePresent
VirtualAlloc
WriteConsoleA
SetThreadContext
EndUpdateResourceA
ReadConsoleInputA
EnumResourceNamesA
ClearCommError
GetThreadPriority
GetNumberFormatA
SetProcessPriorityBoost
HeapFree
GetConsoleMode
GetCommState
GetVersionExA
GetTempPathA
FileTimeToLocalFileTime
dpnlobby
DirectPlay8LobbyCreate
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 832KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ