Static task
static1
Behavioral task
behavioral1
Sample
b68ac1cdf5430e903a4bc6eb040cdb99a900c33b41c960ee85b6ce94b8fc0b31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b68ac1cdf5430e903a4bc6eb040cdb99a900c33b41c960ee85b6ce94b8fc0b31.exe
Resource
win10v2004-20221111-en
General
-
Target
b68ac1cdf5430e903a4bc6eb040cdb99a900c33b41c960ee85b6ce94b8fc0b31
-
Size
310KB
-
MD5
b340c51b2cc76cda53ea5635eaba99cd
-
SHA1
03fb3772ac30521e79e06a58e376ae243ccec790
-
SHA256
b68ac1cdf5430e903a4bc6eb040cdb99a900c33b41c960ee85b6ce94b8fc0b31
-
SHA512
9739c6b4f8ecb5d6e7fb6835443adf6e218cb7f60dd7aa967dd2106765a7c48c7ae4d80e8fdd0858260231a43f23e93ecff1d40047538b1c732c608a6d71057b
-
SSDEEP
6144:ilT4RgdWWEyKaIUhu71Wk/u8QN/rAL01a9mM6WAUep5UauhNehxO:cTp1EbUQRWkW9N/rAIEwMjDQUaNi
Malware Config
Signatures
Files
-
b68ac1cdf5430e903a4bc6eb040cdb99a900c33b41c960ee85b6ce94b8fc0b31.exe windows x86
8cd0585df310cc55ace0359244192b28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetACP
GetLocaleInfoA
VirtualProtect
FileTimeToLocalFileTime
GlobalAddAtomA
GetDriveTypeA
CloseHandle
InterlockedExchange
LockResource
EnterCriticalSection
GlobalFree
SetErrorMode
LoadLibraryExA
RaiseException
GlobalUnlock
SetConsoleOutputCP
HeapCreate
Sleep
GlobalDeleteAtom
GetStdHandle
user32
DrawEdge
ReleaseDC
GetClassNameA
IsIconic
ShowWindow
GetWindow
GetCursorPos
ValidateRect
GetMenuItemInfoA
OemToCharW
GetFocus
EndPaint
GetParent
SetForegroundWindow
GetActiveWindow
BeginPaint
GetWindowTextA
ClipCursor
DrawTextA
wtsapi32
WTSLogoffSession
WTSFreeMemory
WTSOpenServerA
WTSQueryUserToken
WTSCloseServer
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ