Static task
static1
Behavioral task
behavioral1
Sample
b20f53fd701de7d59b3cc854c40b319e085a45c2b7fe98e9597df5981a0f3e27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b20f53fd701de7d59b3cc854c40b319e085a45c2b7fe98e9597df5981a0f3e27.exe
Resource
win10v2004-20220812-en
General
-
Target
b20f53fd701de7d59b3cc854c40b319e085a45c2b7fe98e9597df5981a0f3e27
-
Size
236KB
-
MD5
da7c180c5ebb7b37b39d657df105a9a1
-
SHA1
a589bf985417f587533e30e009ab7e7e9fecca4f
-
SHA256
b20f53fd701de7d59b3cc854c40b319e085a45c2b7fe98e9597df5981a0f3e27
-
SHA512
fbb97f509f9accd085ec91e1556ea941ea4b6000b340bb834d9d54f20acc5268c28b841aeaeaa64fc9daebb70a4a3c4881729f42e549898a2de6e35afd55a0b7
-
SSDEEP
3072:xUIMQRr1mjTlH872NMTWRzvYNhSsCP0t1sUK+HWY80lGW0HBn8OsbB:SILyNSSA1q+HJmnEB
Malware Config
Signatures
Files
-
b20f53fd701de7d59b3cc854c40b319e085a45c2b7fe98e9597df5981a0f3e27.exe windows x86
bc92316c29b742ddad9778e53e8f9d73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord14
kernel32
LoadLibraryA
GetModuleHandleA
GetTickCount
ExitProcess
GetLastError
CompareStringW
CompareStringA
GetLocaleInfoW
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
FlushFileBuffers
VirtualProtect
GetSystemInfo
GetTimeZoneInformation
CloseHandle
SetEnvironmentVariableA
user32
wvsprintfA
wsprintfA
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ