Static task
static1
Behavioral task
behavioral1
Sample
b1300253c58559e74d81ad3b9eb45b270f45d60dca4c1e073a388ead4e6de22d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1300253c58559e74d81ad3b9eb45b270f45d60dca4c1e073a388ead4e6de22d.exe
Resource
win10v2004-20220901-en
General
-
Target
b1300253c58559e74d81ad3b9eb45b270f45d60dca4c1e073a388ead4e6de22d
-
Size
80KB
-
MD5
ab5794dc2baf3f61db932cdb2bd2057c
-
SHA1
c7fd3e4c10b51c9adec4b433c1394a7a4c48b393
-
SHA256
b1300253c58559e74d81ad3b9eb45b270f45d60dca4c1e073a388ead4e6de22d
-
SHA512
232217f22247c1b96d4dee1ab7cc124745a199cf70b90afa8e44c42d498ca851983fa455c11438fed22d4f63d9d2f6cec1bc0ff023bce06c808223da4d5749c0
-
SSDEEP
1536:B6by9Ow+PDLOu5hyo06zPvf0YMjVv/6rFrSrlRCk2Vx:knrlXyd6znf0YM5v/aU1ex
Malware Config
Signatures
Files
-
b1300253c58559e74d81ad3b9eb45b270f45d60dca4c1e073a388ead4e6de22d.exe windows x86
b8824255affdc045d505759a36d2750e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
rand
memset
time
memcpy
sqrt
memmove
clock
swprintf
atol
wcscspn
shlwapi
SHGetValueA
ole32
OleCreateStaticFromData
StgOpenStorage
StgCreateDocfileOnILockBytes
OleRegGetUserType
GetHGlobalFromStream
kernel32
LoadLibraryA
GetCommandLineA
GetStdHandle
GetCurrentThread
ReadFile
GetLocaleInfoA
SetEndOfFile
SetFilePointer
ExitThread
LoadLibraryExA
HeapDestroy
WriteFile
VirtualAlloc
GetLastError
GetACP
ExitProcess
gdi32
GetDCOrgEx
BitBlt
version
VerQueryValueA
GetFileVersionInfoA
VerFindFileA
Sections
.tls Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 979B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ