Static task
static1
Behavioral task
behavioral1
Sample
b551464a0e5a3844841462bca34bc4a0537a11a28fa224f2b026b0e8ac6fa63f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b551464a0e5a3844841462bca34bc4a0537a11a28fa224f2b026b0e8ac6fa63f.exe
Resource
win10v2004-20220812-en
General
-
Target
b551464a0e5a3844841462bca34bc4a0537a11a28fa224f2b026b0e8ac6fa63f
-
Size
338KB
-
MD5
9569b6bd365e95ce742cec098741ae7f
-
SHA1
b0db6bddc3e76a91ec86bfdb9025759fd6a89f29
-
SHA256
b551464a0e5a3844841462bca34bc4a0537a11a28fa224f2b026b0e8ac6fa63f
-
SHA512
bb52a14a744ad984af97395c3c6cf9dd340d0584becbfbaf4179f70d2f04144e46ee6498b0bf1061ad5496217f86202557da7a0e04980a57c400970980b453bb
-
SSDEEP
6144:WHKf4yfVA7at+8OFSaTqI2NmQ4Q4Lk8/FLY5atRlRwonbvrjxWlg+f4eNmOOfpud:GI4Hut+8OF/q3wi4Lk/atRoonbv5Wl1Z
Malware Config
Signatures
Files
-
b551464a0e5a3844841462bca34bc4a0537a11a28fa224f2b026b0e8ac6fa63f.exe windows x86
3443b68dc579eee0d5c8009b7c2c4f22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetCurrentProcessId
GetTimeFormatA
GetOEMCP
HeapCreate
InterlockedExchange
GlobalMemoryStatus
PeekConsoleInputA
GetSystemDefaultLCID
GetACP
VirtualProtect
GetCommandLineA
GetModuleHandleA
ResumeThread
CreateIoCompletionPort
GetTapeStatus
IsDebuggerPresent
GetStdHandle
WaitForSingleObject
GetProcessHeap
LoadLibraryExA
user32
GetClassNameA
EndPaint
GetDlgItem
GetWindowTextLengthA
SetActiveWindow
ShowWindow
DrawTextA
DragDetect
GetCursorPos
wsprintfA
BeginPaint
GetFocus
GetParent
GetTitleBarInfo
SetForegroundWindow
FrameRect
FillRect
GetWindow
ReleaseDC
gdi32
GetLayout
CreateBitmap
GetClipBox
CreatePalette
CloseFigure
secur32
DecryptMessage
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ