Static task
static1
Behavioral task
behavioral1
Sample
b07b0feac150bd225b284404978f72bc298eded68dfba9677a655c50bdd1fbea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b07b0feac150bd225b284404978f72bc298eded68dfba9677a655c50bdd1fbea.exe
Resource
win10v2004-20221111-en
General
-
Target
b07b0feac150bd225b284404978f72bc298eded68dfba9677a655c50bdd1fbea
-
Size
20KB
-
MD5
19a6ff8b897e2863291066e352fafcd6
-
SHA1
c3c33246b2cb12753e7d35e13a0caa4ffbcaf4b3
-
SHA256
b07b0feac150bd225b284404978f72bc298eded68dfba9677a655c50bdd1fbea
-
SHA512
f8f3efa2f1e80dd1cb9dc89ff3f4245559d213c46a7989b2370efac6c0395cb2886acd028568670d7f3e4cbe869b3d0ec00400f1cb4ea0274839a5e94c74284a
-
SSDEEP
96:27p4pYFb6EJksh+PaSorXy7PFdDlhJZMmysXVOERN0J3rhQUxW0Ptboynawk0Xjb:wjVhzSatTy7PFvn5yNW0P1oynaf0Xjo
Malware Config
Signatures
Files
-
b07b0feac150bd225b284404978f72bc298eded68dfba9677a655c50bdd1fbea.exe windows x86
ffa271a1d0d2dec42b71218e1c13e7d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4202
ord6663
ord1105
ord540
ord2818
ord535
ord800
ord825
ord1200
msvcrt
__getmainargs
_acmdln
exit
_initterm
_exit
strrchr
__CxxFrameHandler
__set_app_type
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
_except_handler3
_XcptFilter
kernel32
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
LoadLibraryA
FreeLibrary
GetProcAddress
OpenFileMappingA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
Sleep
user32
GetForegroundWindow
GetWindowTextA
GetAsyncKeyState
GetKeyNameTextA
MapVirtualKeyA
GetKeyState
PeekMessageA
msvcirt
?close@fstream@@QAEXXZ
??_Dfstream@@QAEXXZ
?put@ostream@@QAEAAV1@E@Z
??1ios@@UAE@XZ
??1fstream@@UAE@XZ
?open@fstream@@QAEXPBDHH@Z
?openprot@filebuf@@2HB
??0fstream@@QAE@XZ
?flush@ostream@@QAEAAV1@XZ
?write@ostream@@QAEAAV1@PBDH@Z
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE