Static task
static1
Behavioral task
behavioral1
Sample
b8db2529df9be270c43e676ff6ac58c8da18da12e9a9439c2f3c139eb27d044c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8db2529df9be270c43e676ff6ac58c8da18da12e9a9439c2f3c139eb27d044c.exe
Resource
win10v2004-20220812-en
General
-
Target
b8db2529df9be270c43e676ff6ac58c8da18da12e9a9439c2f3c139eb27d044c
-
Size
370KB
-
MD5
d3859a34a5be9b23168329bf4935618e
-
SHA1
c64472b40910f9fef944bb67eef63a6bd250676d
-
SHA256
b8db2529df9be270c43e676ff6ac58c8da18da12e9a9439c2f3c139eb27d044c
-
SHA512
3aa4cc110aad9b743cd00478e10a051cd0ad8477135733513ed0aa96f7b548aca2d8f0f0578aefce5ef96764f4666c5776337bb3233deadc358554bc22296f5d
-
SSDEEP
6144:hk9kmoMOXSyHyC3jRSaZjmi/KaeF/ae/X7FwHqYLAzBEg:eam8XVHjNSaZy0KaA/auX0h4W
Malware Config
Signatures
Files
-
b8db2529df9be270c43e676ff6ac58c8da18da12e9a9439c2f3c139eb27d044c.exe windows x86
e0fdecb186dd7b6b92cb832a8bb56f40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
CreateFileA
ReleaseMutex
GetCurrentThreadId
SetEnvironmentVariableA
CreateMutexA
TlsGetValue
CloseHandle
GetExitCodeProcess
GlobalUnlock
HeapCreate
GlobalFree
lstrlenW
GetStdHandle
SetLastError
FindResourceA
VirtualQuery
GetModuleHandleA
GetVersion
LoadLibraryExW
user32
SetFocus
DrawEdge
GetIconInfo
CreateMenu
DispatchMessageA
IsWindow
GetDlgItem
CreateWindowExA
FillRect
GetDC
DrawMenuBar
CallWindowProcA
CheckRadioButton
ntshrui
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ