Static task
static1
Behavioral task
behavioral1
Sample
b531baf6be7d483abfd2c4f728864beb0cb43029cd8d1d742286fbfa28b5e0de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b531baf6be7d483abfd2c4f728864beb0cb43029cd8d1d742286fbfa28b5e0de.exe
Resource
win10v2004-20221111-en
General
-
Target
b531baf6be7d483abfd2c4f728864beb0cb43029cd8d1d742286fbfa28b5e0de
-
Size
180KB
-
MD5
9788bf220a4324a0dcd562e6b5821eaf
-
SHA1
10cae9f55f238ea3409402d60f231750d64324b3
-
SHA256
b531baf6be7d483abfd2c4f728864beb0cb43029cd8d1d742286fbfa28b5e0de
-
SHA512
8fdf9f241bab132e22468843d7b1df9564810fb23dd5c9fe339275c3c866431c14de00bfda7943f8c74618e0d8c2b583776d79e83c4a004f342df36034a8111a
-
SSDEEP
3072:wc+hdhvskZfPwZ0MnWb9UKzGxMIEz106xe+kaPeV3ZaiEc2QcU2LMh7wPfjFD9xH:+hzvfP+W7GxrE26ohaWJZaiEQrAfZ5
Malware Config
Signatures
Files
-
b531baf6be7d483abfd2c4f728864beb0cb43029cd8d1d742286fbfa28b5e0de.exe windows x86
359d74f0e3916a46726d6f18cb781067
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
wcscat
memset
memcpy
vsprintf
RtlUnwind
kernel32
lstrcatA
CheckRemoteDebuggerPresent
SetProcessShutdownParameters
OutputDebugStringA
GetProcAddress
ExitProcess
SetErrorMode
HeapAlloc
WaitForSingleObject
GetProcessHeap
Sleep
TerminateProcess
user32
DefWindowProcW
UpdateWindow
MessageBoxW
CreateWindowExW
GetActiveWindow
ShowWindow
DispatchMessageW
LoadStringW
RegisterClassExW
TranslateMessage
BeginPaint
PostQuitMessage
GetMessageW
DestroyWindow
EndPaint
powrprof
GetPwrCapabilities
IsPwrShutdownAllowed
GetActivePwrScheme
IsPwrHibernateAllowed
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ