Static task
static1
Behavioral task
behavioral1
Sample
b37bba656bc8208405582973617fc66378c0d61c0e15eabb390903cc23942b01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b37bba656bc8208405582973617fc66378c0d61c0e15eabb390903cc23942b01.exe
Resource
win10v2004-20221111-en
General
-
Target
b37bba656bc8208405582973617fc66378c0d61c0e15eabb390903cc23942b01
-
Size
769KB
-
MD5
2d622caad32ea468bb487f48e5ffdc12
-
SHA1
94f202d1ed4a4df7b51cc1d741970a4efbcf1835
-
SHA256
b37bba656bc8208405582973617fc66378c0d61c0e15eabb390903cc23942b01
-
SHA512
932fddf6b7375871d6f17409d90ec0d18bc70d83c6bfda7c8700b77959f6671c757e6b9b39848b75c2276adf19565815b36bbe9277717e3cbdc0772a3c38a16a
-
SSDEEP
24576:hRX2fwwcbTYd+ibBFfqFDTKY3dTHuT/0:b2OYd7p+DTp3dTHO0
Malware Config
Signatures
Files
-
b37bba656bc8208405582973617fc66378c0d61c0e15eabb390903cc23942b01.exe windows x86
d8d0c8072118345eebc0fcaed0d2e8b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetStdHandle
FindClose
RemoveDirectoryA
GetModuleHandleA
ResetEvent
FindClose
GetFileType
GetCommandLineA
VirtualProtectEx
RemoveDirectoryA
WriteConsoleW
CreateFileA
GetDriveTypeA
CreateFileMappingW
CreateMutexA
ReleaseSemaphore
ReleaseMutex
WriteFile
lstrlenA
HeapFree
DeleteFileA
OpenEventW
CreateDirectoryW
Beep
user32
CreateIcon
GetWindowLongA
GetSysColor
IsWindow
GetClassInfoA
DestroyMenu
PeekMessageA
MessageBoxA
FindWindowA
DestroyMenu
DrawTextW
DispatchMessageA
IsZoomed
dmutil
DisplayError
DisplayError
DisplayError
DisplayError
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ