Static task
static1
Behavioral task
behavioral1
Sample
b12b43cf4cc72b22bf62b035135694ae9acd693a345de607ed2d21d8cd52a0c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b12b43cf4cc72b22bf62b035135694ae9acd693a345de607ed2d21d8cd52a0c8.exe
Resource
win10v2004-20220812-en
General
-
Target
b12b43cf4cc72b22bf62b035135694ae9acd693a345de607ed2d21d8cd52a0c8
-
Size
75KB
-
MD5
54fbffa7973e63550e69e4d75c777975
-
SHA1
4c19658abefcbe6d6af5d88a92fe3f4a593b54b5
-
SHA256
b12b43cf4cc72b22bf62b035135694ae9acd693a345de607ed2d21d8cd52a0c8
-
SHA512
25172e7b46f599f698d4f22db0ffea87476afa2c6384595acc83d9846d0a97af5ede50a9c68e1a2259b6f53479d49e791f5a425e1a91fe84b369c598c2a03806
-
SSDEEP
1536:bBJ/e7g/35gGEJYNNBBct12RpiYhF3QlH9J4s9VcUib3h9lcpNB:b9B6YLqdJIjb3DlcpX
Malware Config
Signatures
Files
-
b12b43cf4cc72b22bf62b035135694ae9acd693a345de607ed2d21d8cd52a0c8.exe windows x86
9cc1d2ddf70b28d9abcc22a141a54645
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
ResumeThread
SetLastError
FindClose
GetPrivateProfileStringW
EnterCriticalSection
GetModuleHandleA
GetCurrentProcessId
LocalFree
lstrlenW
GetModuleFileNameA
FindAtomW
GetCurrentThreadId
HeapCreate
GetNumberFormatW
SetEvent
TlsGetValue
GetDriveTypeW
GetConsoleAliasW
EnumCalendarInfoW
user32
GetCursorInfo
DispatchMessageA
GetKeyState
GetClassInfoA
CallWindowProcW
IsWindow
DispatchMessageA
GetKeyboardType
SetFocus
DrawTextW
GetClientRect
GetMenuInfo
GetSysColor
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ