Static task
static1
Behavioral task
behavioral1
Sample
b2b1f1bee15dceb0fb9c858ee685e85c415a637036040b06a98c6e2a65bee05f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2b1f1bee15dceb0fb9c858ee685e85c415a637036040b06a98c6e2a65bee05f.exe
Resource
win10v2004-20220901-en
General
-
Target
b2b1f1bee15dceb0fb9c858ee685e85c415a637036040b06a98c6e2a65bee05f
-
Size
272KB
-
MD5
4920044c4809b21e9cdb565178120f28
-
SHA1
6a7b39210405fd24e91e9a236ec495740dc3b339
-
SHA256
b2b1f1bee15dceb0fb9c858ee685e85c415a637036040b06a98c6e2a65bee05f
-
SHA512
2548f63523f89910fc463c1ca3544d0a83d0d41f770406411a1da8b1d51ae1d63e99b4d886c5e7d9d19d86d0ba513820d9481de825259d6ea4fc32f7afde6a1e
-
SSDEEP
6144:t0bATIytwT59CfTe/N+YcRCSnuZ0+QHstwhn2HUrCOy:t0fy89Cq/UY9ZSOwh2HzOy
Malware Config
Signatures
Files
-
b2b1f1bee15dceb0fb9c858ee685e85c415a637036040b06a98c6e2a65bee05f.exe windows x86
a11ef335e186f928914164cff0210ac5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIcosh
floor
ceil
strlen
realloc
__p__iob
free
_fileno
_setmode
malloc
calloc
fread
ferror
fseek
ftell
_fstat
feof
fclose
fopen
qsort
memmove
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
HeapReAlloc
TlsSetValue
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..aer Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ