Static task
static1
Behavioral task
behavioral1
Sample
b437583061c92a77e7185bfb25aff2145a28c7a7ee562977de80251407c17b44.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b437583061c92a77e7185bfb25aff2145a28c7a7ee562977de80251407c17b44.exe
Resource
win10v2004-20221111-en
General
-
Target
b437583061c92a77e7185bfb25aff2145a28c7a7ee562977de80251407c17b44
-
Size
25KB
-
MD5
bac59488ce5c29a091447064c612ad20
-
SHA1
33f9b53ba637d7fe6506cda383d4b2c111c04c58
-
SHA256
b437583061c92a77e7185bfb25aff2145a28c7a7ee562977de80251407c17b44
-
SHA512
23bbbd1d3938947087d449156ece7f8cfdf20f1dde46d4de1276d6d02ef1183b137f1b876a7c6547f52ceb6f5fd5a2d3d48015680c5f8e33928e43deb75060bc
-
SSDEEP
768:nwarRCrvRoSbua63TaIxrmbof5UBsK0HZJphpJZRxdvniX56bg8ICmPp0+yqOp/p:RRCrvRoSbua2TaymbIUBsK0HZJphpJZP
Malware Config
Signatures
Files
-
b437583061c92a77e7185bfb25aff2145a28c7a7ee562977de80251407c17b44.exe windows x86
ef7acd4b457076f06678a5d9473acf4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
WriteProcessMemory
MoveFileWithProgressA
FindFirstChangeNotificationA
SetConsoleCursor
GlobalAlloc
LZCreateFileW
GetConsoleCommandHistoryW
SetDefaultCommConfigA
LCMapStringA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE