Static task
static1
Behavioral task
behavioral1
Sample
b830fa2f3ec95f791bbf21937267386080c954a0a5081c9b213de03705f54836.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b830fa2f3ec95f791bbf21937267386080c954a0a5081c9b213de03705f54836.exe
Resource
win10v2004-20220901-en
General
-
Target
b830fa2f3ec95f791bbf21937267386080c954a0a5081c9b213de03705f54836
-
Size
402KB
-
MD5
f34b97bd1648ff5b7efeff7633a85fc0
-
SHA1
82cd0e45f2af870103f1705543998d3c0f415b36
-
SHA256
b830fa2f3ec95f791bbf21937267386080c954a0a5081c9b213de03705f54836
-
SHA512
cef9564908c8edbaa5dbc591e405eb992445f42311df61a480ea168371c24ee0b1329351a7d1369fac5adc098e589f3856064cc363c11ffb589ffd901c3451fa
-
SSDEEP
6144:1sybizPJMmqiM3BZ3oQME6cbE86eOGiqMKDJk4PwqsT2JDMFkCIwGeDr4DmLpFF8:1NKPamqFZjROWV0T2m1ILe0Kk
Malware Config
Signatures
Files
-
b830fa2f3ec95f791bbf21937267386080c954a0a5081c9b213de03705f54836.exe windows x86
774cdc4caa6e87113d9c1c70cebe63ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
InterlockedExchange
DeleteFileA
CreateSemaphoreW
WriteConsoleW
InitializeCriticalSection
GetStringTypeW
GetConsoleAliasA
SetCurrentDirectoryA
GetShortPathNameW
DeviceIoControl
FatalExit
VirtualAlloc
DeleteFileA
DeleteFileA
SetEnvironmentVariableA
GetModuleHandleA
CreatePipe
GetACP
CreateMailslotA
GetProcessHeap
CreateFileMappingW
SetVolumeLabelA
mshtml
ShowHTMLDialog
ShowModalDialog
DllEnumClassObjects
ShowModelessHTMLDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrs Size: 393KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ