Static task
static1
Behavioral task
behavioral1
Sample
b194057e1d634aac1f2fda2e6c2a9d0009a1358b068a6bf43d905d273be38294.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b194057e1d634aac1f2fda2e6c2a9d0009a1358b068a6bf43d905d273be38294.exe
Resource
win10v2004-20220812-en
General
-
Target
b194057e1d634aac1f2fda2e6c2a9d0009a1358b068a6bf43d905d273be38294
-
Size
385KB
-
MD5
63c71509b9c27d4ed03b73e62d8e4d28
-
SHA1
4d13fbfd8a6a0bb0d77b7b1a6b4998d69f90046c
-
SHA256
b194057e1d634aac1f2fda2e6c2a9d0009a1358b068a6bf43d905d273be38294
-
SHA512
2f07b93583128a64aab3adf1af5595f97870becc2eefb14da3f302441a5374a0d484f9d83170a6a5491b514522140ab5a0c1a99f2220c20d94500016dd159e89
-
SSDEEP
6144:k/ZimjPqipSnVKkYFmUzS9n4rPY7AC42KibWKUqi+oAVLXHKVZ/1gdxEx5:OXSVKkY4UmR4rPx9kWKUZ+BXyZ/1p
Malware Config
Signatures
Files
-
b194057e1d634aac1f2fda2e6c2a9d0009a1358b068a6bf43d905d273be38294.exe windows x86
224afebba0b1f74412dcb58e735303d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
CloseHandle
CreateMutexA
GetModuleHandleW
FindVolumeClose
InterlockedExchange
GetExitCodeProcess
GetACP
GetCommandLineA
ResetEvent
GetDriveTypeW
GetEnvironmentVariableA
GetPrivateProfileIntW
CreateEventA
GlobalSize
lstrlenA
ResumeThread
VirtualAlloc
GlobalFree
WriteFile
user32
CallWindowProcW
GetCursorInfo
GetClientRect
GetKeyboardType
EndDialog
DrawStateW
SetFocus
GetSysColor
DispatchMessageA
CreateWindowExA
IsWindow
GetSysColor
GetClassInfoA
avicap32
videoThunk32
AppCleanup
videoThunk32
videoThunk32
videoThunk32
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ