Static task
static1
Behavioral task
behavioral1
Sample
b8230db912faf67ae659902e20b59fd9a2a1784b26c850eef10043c270f618d6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b8230db912faf67ae659902e20b59fd9a2a1784b26c850eef10043c270f618d6.exe
Resource
win10v2004-20221111-en
General
-
Target
b8230db912faf67ae659902e20b59fd9a2a1784b26c850eef10043c270f618d6
-
Size
328KB
-
MD5
8c70140da86eadb6300bfcfbeb421c20
-
SHA1
82dcc782e10100cb7018fc6e146d9d22d24d4a15
-
SHA256
b8230db912faf67ae659902e20b59fd9a2a1784b26c850eef10043c270f618d6
-
SHA512
6ac466e0f7a80720792d58829b3ba761f0bfd6bcbfa6f09103dc4b71a389f508fef160f8d2c09ae555d5d2f559beff3edda247a82ef66f9692f2a9e6633d20e3
-
SSDEEP
6144:1qoL3wcig4hBXs/ZTJIUKPNDh6VIq26FVxW9Li1W:DEcig4h9shXKVDhOIPMVwis
Malware Config
Signatures
Files
-
b8230db912faf67ae659902e20b59fd9a2a1784b26c850eef10043c270f618d6.exe windows x86
d96fadbdba37dbeb737fe526daa0b498
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
ReleaseMutex
GetCommandLineA
GetComputerNameA
GetExitCodeProcess
GetModuleHandleA
GetLastError
CreateSemaphoreA
FreeConsole
GetTickCount
CreateMutexA
SearchPathA
GetModuleFileNameA
Sleep
GetDriveTypeA
CloseHandle
TlsGetValue
FindClose
SetLastError
VirtualProtect
shell32
SHGetNewLinkInfo
SHGetMalloc
DragFinish
SHFree
DragAcceptFiles
SheChangeDirA
SHAlloc
DragQueryPoint
ShellMessageBoxA
SHGetSettings
SHGetDiskFreeSpaceA
DragQueryFileA
SheGetDirA
ShellAboutA
loghours
DirSyncScheduleDialogEx
ReplicationScheduleDialog
DialinHoursDialog
LogonScheduleDialog
DialinHoursDialogEx
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ