Static task
static1
Behavioral task
behavioral1
Sample
b593755f2ed64b52d256ab5df6315b9fbbebb2bcb4a8fba8f8d90eab2a2192ee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b593755f2ed64b52d256ab5df6315b9fbbebb2bcb4a8fba8f8d90eab2a2192ee.exe
Resource
win10v2004-20220901-en
General
-
Target
b593755f2ed64b52d256ab5df6315b9fbbebb2bcb4a8fba8f8d90eab2a2192ee
-
Size
152KB
-
MD5
bfd01c632045259bf9d41efa8c310d68
-
SHA1
fc4ccd4e3a9459d2821f72f7228d0398d16014aa
-
SHA256
b593755f2ed64b52d256ab5df6315b9fbbebb2bcb4a8fba8f8d90eab2a2192ee
-
SHA512
1ecacd0592978c2eb2401dd9c729d2d2e4cee84f2a2bb13dc0bb2097b675c7351a22a4f927a680cabb531b99b337d6329f8223be7f25689813032293264b758b
-
SSDEEP
3072:LsKqMzyG4wJvF4cJp3zwwVvu4mjhlk6TSVFhV30I:wlMzhHdfJpjwwVv1mjhlk6TSrhV3
Malware Config
Signatures
Files
-
b593755f2ed64b52d256ab5df6315b9fbbebb2bcb4a8fba8f8d90eab2a2192ee.exe windows x86
a07e4373e648023a1d85343b2de236dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetIconInfo
BeginDeferWindowPos
CharLowerBuffA
DeferWindowPos
GetMessagePos
GetScrollInfo
DispatchMessageA
GetSysColor
SetTimer
TrackPopupMenu
FrameRect
MessageBoxA
ClientToScreen
DrawTextA
GetActiveWindow
GetDC
GetClassInfoA
GetWindow
CreateIcon
CharNextA
GetClipboardData
FillRect
EnumThreadWindows
GetDesktopWindow
GetMenuItemCount
SetWindowPos
IsDialogMessageA
IsMenu
CharLowerA
CharToOemA
GetWindowTextA
GetParent
CallWindowProcA
GetForegroundWindow
EqualRect
DefWindowProcA
GetLastActivePopup
EnumChildWindows
kernel32
LocalFree
ReadFile
WriteFile
CompareStringA
DeleteFileA
SetHandleCount
LoadLibraryExA
HeapDestroy
GetVersion
GetUserDefaultLCID
GetFullPathNameA
GetCurrentThread
FindResourceA
CreateFileA
VirtualAlloc
SetFilePointer
lstrlenA
GetThreadLocale
GetCPInfo
HeapAlloc
GetOEMCP
LocalReAlloc
ExitProcess
HeapFree
VirtualFree
GetModuleFileNameA
LockResource
GetProcAddress
RaiseException
FindClose
GetLocaleInfoA
SetEvent
lstrcpynA
GlobalAlloc
GetCurrentProcess
LocalAlloc
CreateEventA
GetCurrentThreadId
Sleep
SizeofResource
Sections
CODE Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 134KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ