Static task
static1
Behavioral task
behavioral1
Sample
b7b1654ed6cdc7a9986091cc36a013bd8d907640ce4035f4203b55deddc30904.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7b1654ed6cdc7a9986091cc36a013bd8d907640ce4035f4203b55deddc30904.exe
Resource
win10v2004-20220901-en
General
-
Target
b7b1654ed6cdc7a9986091cc36a013bd8d907640ce4035f4203b55deddc30904
-
Size
416KB
-
MD5
b56f706ca89a520ab7763db1b3b2c416
-
SHA1
4195a160a2e407d63c5f9a8a33af008ae1bc2480
-
SHA256
b7b1654ed6cdc7a9986091cc36a013bd8d907640ce4035f4203b55deddc30904
-
SHA512
6b065abff3b0c10570a422fdae620a9969f01f2f9ebe05bc3967e86e3d1eacd3702faf0a9ae54acfbe956598c44ccd33a52360c37412cf46a33aae59a9b2fc96
-
SSDEEP
6144:c1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:cKowTWTq4yzd/tS7U8tEn
Malware Config
Signatures
Files
-
b7b1654ed6cdc7a9986091cc36a013bd8d907640ce4035f4203b55deddc30904.exe windows x86
e14440c8124dc0a15ace1890af3864dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalDeleteAtom
VirtualProtect
GetLocaleInfoA
LoadLibraryExA
RaiseException
GetACP
GlobalAddAtomA
GlobalFree
EnterCriticalSection
GetCommandLineA
GetFileAttributesA
GetSystemDirectoryA
HeapCreate
GetLogicalDrives
GetLastError
SetErrorMode
CloseHandle
LockResource
InterlockedExchange
Sleep
GetStdHandle
user32
GetCursorPos
ReleaseDC
GetClassNameA
FrameRect
GetMenuItemInfoA
EndPaint
DrawEdge
SetForegroundWindow
BeginPaint
DrawTextA
GetWindow
ShowWindow
GetActiveWindow
GetWindowTextA
GetParent
ValidateRect
IsIconic
GetFocus
wsprintfA
httpapi
HttpRemoveUrl
HttpInitialize
HttpCreateHttpHandle
HttpTerminate
HttpAddUrl
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ