Static task
static1
Behavioral task
behavioral1
Sample
b9e4eb8eb04bf71e499a185967525bc5c65db3d813400ca36ad2380e3ac4852b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9e4eb8eb04bf71e499a185967525bc5c65db3d813400ca36ad2380e3ac4852b.exe
Resource
win10v2004-20220812-en
General
-
Target
b9e4eb8eb04bf71e499a185967525bc5c65db3d813400ca36ad2380e3ac4852b
-
Size
812KB
-
MD5
c27fe7bfe5112d381b9d03f8d94ee940
-
SHA1
9a993ffd6f99bdffd4f75ffec7f72c11a311667f
-
SHA256
b9e4eb8eb04bf71e499a185967525bc5c65db3d813400ca36ad2380e3ac4852b
-
SHA512
fd0f90169d0fae7451bf26ab32de843098efb0dc3344d0835b4e603f20952cad5181f3d53e60cdc666698d6293b4cbb40bb93eddd30d173bee2c4369a2e41746
-
SSDEEP
24576:YPi5r/0hFTLpZecgzQkwwc20bXB+mfpsle:YPi5LOHpUVzJSBIe
Malware Config
Signatures
Files
-
b9e4eb8eb04bf71e499a185967525bc5c65db3d813400ca36ad2380e3ac4852b.exe windows x86
fe7a3d393ea2f520d9cd79e2ebea6587
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
Sleep
SetEvent
LoadLibraryA
CloseHandle
CreateDirectoryA
VirtualProtect
CreateFileA
GetEnvironmentStringsW
GetModuleFileNameA
RemoveDirectoryA
GetCommandLineA
SetLastError
WriteConsoleA
lstrlenA
DeleteFileA
SetLastError
ReadConsoleW
EnterCriticalSection
GetFileSize
CreateDirectoryW
OpenMutexA
OpenSemaphoreW
GlobalFree
GetStartupInfoA
user32
PeekMessageA
CallWindowProcA
DispatchMessageA
GetClassInfoA
DispatchMessageA
DestroyMenu
SetFocus
IsWindow
DrawTextA
IsZoomed
FindWindowA
GetWindowLongA
GetSysColor
cfgbkend
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
advapi32
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE