Static task
static1
Behavioral task
behavioral1
Sample
b7034a37d668ee3343801925340266b4c852d4977b6ae4612e7837375148adb6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7034a37d668ee3343801925340266b4c852d4977b6ae4612e7837375148adb6.exe
Resource
win10v2004-20220812-en
General
-
Target
b7034a37d668ee3343801925340266b4c852d4977b6ae4612e7837375148adb6
-
Size
929KB
-
MD5
a27110f8c9f2fa8727f41963e17ab2b1
-
SHA1
be6eb1700d0d12fb010ca0aff2193c685fae7f41
-
SHA256
b7034a37d668ee3343801925340266b4c852d4977b6ae4612e7837375148adb6
-
SHA512
88db038d7bec9e7a97d2a4a449a8036afb91cf16ab7bab21c93cd1ad1455160dac376384e65c5f4d435ebd3a76ac502970c6de2077dd0af588c85bf3f79cf1d9
-
SSDEEP
24576:xKZ1yadRyvQqQpFXRuvkjQS32Q+RePK/Hm7d:cyQqQ7YvkuZo
Malware Config
Signatures
Files
-
b7034a37d668ee3343801925340266b4c852d4977b6ae4612e7837375148adb6.exe windows x86
1341b7f6c68a2c4ef7d91ef0221b3c85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
gdi32
DeleteObject
advapi32
CloseServiceHandle
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
IsWindow
Sections
.text Size: 37KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 886KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ