Static task
static1
Behavioral task
behavioral1
Sample
b03fb9a752758d137d6205290301c8011c840bfee8b2e4ef61304780312fbbbb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b03fb9a752758d137d6205290301c8011c840bfee8b2e4ef61304780312fbbbb.exe
Resource
win10v2004-20221111-en
General
-
Target
b03fb9a752758d137d6205290301c8011c840bfee8b2e4ef61304780312fbbbb
-
Size
365KB
-
MD5
8d07e5d11e58f258a98be61505929fdc
-
SHA1
3c0ef86feb414fd12b02e50717c8ffa9c4cd2bfc
-
SHA256
b03fb9a752758d137d6205290301c8011c840bfee8b2e4ef61304780312fbbbb
-
SHA512
a0d31d5b1b83f2c878d73d7d90e83138be7600e753c02b1322bad28f2cee021a4851aac06437b78487a3c4f695cf8857f8c12a59ff19d951f09b44ce99e80ca2
-
SSDEEP
6144:LRMMa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:LRMLx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
Files
-
b03fb9a752758d137d6205290301c8011c840bfee8b2e4ef61304780312fbbbb.exe windows x86
c798339896aa7be6ced858dbddea9048
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetModuleHandleA
GetModuleFileNameA
FindAtomW
GetFileAttributesA
GetCurrentProcessId
GetPrivateProfileStringW
HeapCreate
GetConsoleAliasW
ReadFile
GlobalFree
LocalFree
CreateMailslotA
FindClose
SetEvent
GetCurrentThreadId
GetDriveTypeW
ResumeThread
EnumCalendarInfoW
EnterCriticalSection
user32
GetSysColor
DispatchMessageA
GetClientRect
GetCursorInfo
GetKeyState
GetClassInfoA
IsWindow
SetFocus
GetMenuInfo
CallWindowProcW
GetKeyboardType
DrawTextW
DispatchMessageA
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ