Static task
static1
Behavioral task
behavioral1
Sample
b27d095f8c14d93662b74e3fb01db5d8212061882455c78e3e35b8bca088b81e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b27d095f8c14d93662b74e3fb01db5d8212061882455c78e3e35b8bca088b81e.exe
Resource
win10v2004-20220812-en
General
-
Target
b27d095f8c14d93662b74e3fb01db5d8212061882455c78e3e35b8bca088b81e
-
Size
58KB
-
MD5
79a881b0ca11c75d14a561da9e73df4c
-
SHA1
1b927847f8dbd416ecc042eaceae4d3fb3fdbb9e
-
SHA256
b27d095f8c14d93662b74e3fb01db5d8212061882455c78e3e35b8bca088b81e
-
SHA512
28a1a1786ce2eca58d499052e921f676af5e7a7bd07810f0fa11ae22753d22f8aab4c431ef29ad91bdb2f7e154d998b5daa0a6a93175f4cbed389dbb8a79777e
-
SSDEEP
768:qw829ZiUzAr4rS6heyY1soCG4IXXLrXhYGJYStd+0m1UmMsPOq:r82bi4uSS6MyYuoqIXXLrXzuef9j
Malware Config
Signatures
Files
-
b27d095f8c14d93662b74e3fb01db5d8212061882455c78e3e35b8bca088b81e.exe windows x86
ea9083d6daf4a96a9f4175e7977aa0a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CreateMutexA
CloseHandle
TlsGetValue
GetStdHandle
GetModuleHandleA
SetLastError
LoadLibraryExA
GetProcessHeap
lstrcpyA
GetEnvironmentVariableA
CreateFileW
lstrlenW
HeapCreate
GlobalUnlock
ReleaseMutex
GlobalFree
GetCurrentThreadId
GetExitCodeProcess
UnmapViewOfFile
user32
CallWindowProcA
GetCaretPos
CreateWindowExA
GetDlgItem
CheckRadioButton
IsWindow
GetDC
FillRect
CreateMenu
DrawEdge
SetFocus
DispatchMessageA
DrawMenuBar
rsaenh
CPDecrypt
CPDeriveKey
CPGenKey
CPHashData
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
urehkmu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE