Static task
static1
Behavioral task
behavioral1
Sample
b0b4f0856973939e18d650ab1f52b76996de47b55e969702dc86fa96079533d4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0b4f0856973939e18d650ab1f52b76996de47b55e969702dc86fa96079533d4.exe
Resource
win10v2004-20221111-en
General
-
Target
b0b4f0856973939e18d650ab1f52b76996de47b55e969702dc86fa96079533d4
-
Size
15KB
-
MD5
debe2bed8012e99dc24e271f5adced0e
-
SHA1
06669c3071201fc7f2cf9977d25b7c1f5d37dfcf
-
SHA256
b0b4f0856973939e18d650ab1f52b76996de47b55e969702dc86fa96079533d4
-
SHA512
af1eb8ca7da8df8bc042082d1747271cbf131882b15c796909140bc44e27705e02ec28add7e48d1207eddc4da51ff2161eba3141a3d7c1d76d44129e7fd478af
-
SSDEEP
96:JmAUdDqFdbJ/Gp9SpugkYjCT+2BFnM56Y9PAwWXajWm8fR47pRK1WDaxYcAUdDqF:Xjdupjfs4B9M562YwimWm8fe4WDae
Malware Config
Signatures
Files
-
b0b4f0856973939e18d650ab1f52b76996de47b55e969702dc86fa96079533d4.exe windows x86
1b508ed2a91c8d03dddf82c99fd4e368
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
CreateThread
Sleep
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcatA
user32
MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA
msvcrt
??2@YAPAXI@Z
_stricmp
atoi
strrchr
_itoa
_except_handler3
netapi32
Netbios
Sections
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ