Static task
static1
Behavioral task
behavioral1
Sample
96b15ba35c671eae2eb58634e6894626d0007b66328d22d5ff10bd4a4f49367d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
96b15ba35c671eae2eb58634e6894626d0007b66328d22d5ff10bd4a4f49367d.exe
Resource
win10v2004-20220901-en
General
-
Target
96b15ba35c671eae2eb58634e6894626d0007b66328d22d5ff10bd4a4f49367d
-
Size
195KB
-
MD5
4f454fc4a9936b4dd9968c5d3f8dbe3e
-
SHA1
6a2e68a2925a09037ad4927f522d27a59d143d73
-
SHA256
96b15ba35c671eae2eb58634e6894626d0007b66328d22d5ff10bd4a4f49367d
-
SHA512
7e29cd1df57c745c71ee39b6b60703141b6d9d292447159ec59589a084f3d236de05b4ee7f191846460e47034a62b209f94a7c95405ebc3efa7b8501bb3d80e8
-
SSDEEP
6144:TBXBtrFb6nJkviH2szGio6eHDmHBP6R9g:dXBtrBqHtzG7nHDmHByR9g
Malware Config
Signatures
Files
-
96b15ba35c671eae2eb58634e6894626d0007b66328d22d5ff10bd4a4f49367d.exe windows x86
fd9e6211747c3c74e546c8c3b455d389
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
timeGetTime
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
BeginUpdateResourceA
CloseHandle
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
EndUpdateResourceA
ExpandEnvironmentStringsA
FindFirstFileA
FindNextFileA
FindResourceA
FreeLibrary
GetBinaryTypeA
GetCommandLineA
GetCurrentDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
GetFileSize
GetFileTime
GetLastError
GetLogicalDriveStringsA
GetProcessHeap
GetTempFileNameA
GetTempPathA
GetVersion
HeapAlloc
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MoveFileA
MoveFileExA
ReadFile
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SizeofResource
UpdateResourceA
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
PostQuitMessage
RegisterClassA
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ