Static task
static1
Behavioral task
behavioral1
Sample
b4b8fb09589b64414da6cb4ce593e8a62ee42cce79e018c158ef9478c48f2c5a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4b8fb09589b64414da6cb4ce593e8a62ee42cce79e018c158ef9478c48f2c5a.exe
Resource
win10v2004-20220901-en
General
-
Target
b4b8fb09589b64414da6cb4ce593e8a62ee42cce79e018c158ef9478c48f2c5a
-
Size
180KB
-
MD5
7785af8aaf996d49abae544fc1a4a37e
-
SHA1
bada3c1217bcd2d34d57b969aec47a878ef1a147
-
SHA256
b4b8fb09589b64414da6cb4ce593e8a62ee42cce79e018c158ef9478c48f2c5a
-
SHA512
2e0f0418f58743b837b5238f33b96b2b5e0eeed6d59775984c39024ea382431d95aa673af29410b72a96a5d538066901b0e583eb395627eda44bd07c2de09469
-
SSDEEP
3072:066lO4D7DjgbMdmxtLqWmINWZNsZvtuQR3dU6MkfQ0uVRZXAjgCe4X:F6pXXWt+WmiWZNsZvD3+wfAZQjguX
Malware Config
Signatures
Files
-
b4b8fb09589b64414da6cb4ce593e8a62ee42cce79e018c158ef9478c48f2c5a.exe windows x86
bfc8a0cff02f02b57e0e458af6de0872
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextA
gdi32
SaveDC
version
VerQueryValueA
comctl32
ImageList_Add
cfgmgr32
CM_Get_DevNode_Status
Sections
.MPRESS1 Size: 171KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE