Static task
static1
Behavioral task
behavioral1
Sample
b201a58c00ace75078e9436cad48cd2f9c07f9cbcd9cd6a8ec037e85d3e35423.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b201a58c00ace75078e9436cad48cd2f9c07f9cbcd9cd6a8ec037e85d3e35423.exe
Resource
win10v2004-20221111-en
General
-
Target
b201a58c00ace75078e9436cad48cd2f9c07f9cbcd9cd6a8ec037e85d3e35423
-
Size
351KB
-
MD5
a654f8c3f0377b097f6a20656c0b39fd
-
SHA1
9b544eb131fa45a96db7e3b0cb94e162a8600b0a
-
SHA256
b201a58c00ace75078e9436cad48cd2f9c07f9cbcd9cd6a8ec037e85d3e35423
-
SHA512
c1bddf8d812bcc1dcbdd516322cbddf4cc7109242d2670b06db80d1215464c81a234397820f3bcb05a0c8581bc69b874553844cc093da2bebb472b8d62130ba2
-
SSDEEP
6144:xYIu0NgrBRkuG3hMReiuslZwcAXPj1eVqLSeRE1sq+6HQMoLnL6YflO2nJ:xjPNgwuGxRgHsZeED96LoX6X+
Malware Config
Signatures
Files
-
b201a58c00ace75078e9436cad48cd2f9c07f9cbcd9cd6a8ec037e85d3e35423.exe windows x86
01ae8bcbf1cabf2ea3788a7cb23770ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
CreateFileMappingW
DeleteFileA
lstrlenA
WriteConsoleW
SetStdHandle
CreateMailslotW
WriteFile
FindClose
FindClose
ReleaseMutex
CreateEventW
Sleep
HeapFree
SetEvent
ResetEvent
SetLocalTime
GetCommandLineA
CreateDirectoryW
OpenEventA
GetLastError
RemoveDirectoryA
GetModuleHandleA
GetFileType
VirtualProtectEx
ntshrui
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ