Static task
static1
Behavioral task
behavioral1
Sample
b7a1e759daa9c4597a4171ffab2e876b56e80eb2fca6e4a4ccbe81faeac5ccd3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b7a1e759daa9c4597a4171ffab2e876b56e80eb2fca6e4a4ccbe81faeac5ccd3.exe
Resource
win10v2004-20221111-en
General
-
Target
b7a1e759daa9c4597a4171ffab2e876b56e80eb2fca6e4a4ccbe81faeac5ccd3
-
Size
5.5MB
-
MD5
e23885306f19c98e9738d87dc2a4c9cd
-
SHA1
ebd9ed7fe5809b7edf198909e89b3b2388b2be8b
-
SHA256
b7a1e759daa9c4597a4171ffab2e876b56e80eb2fca6e4a4ccbe81faeac5ccd3
-
SHA512
3881230dddb788426462ddc5d0df378644bcbcedbf197af081c74095b89a7c7a9ded216445c107823d33aefa2a487fb0d2126684b8fd8f2b9b6b686b39ed5162
-
SSDEEP
98304:rS67v5nrFQUKsdtbey+vPe3h9ac37Gyy1HW6WxkwrySG09bk1l:rSCvB6UKsTbeyUPe3h93LGBW/xk8ybUS
Malware Config
Signatures
Files
-
b7a1e759daa9c4597a4171ffab2e876b56e80eb2fca6e4a4ccbe81faeac5ccd3.exe windows x86
22f2523354dbf2c836f17ee367b53028
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
DeviceIoControl
ReplaceFileA
SetConsoleWindowInfo
GetConsoleAliasesLengthA
SetThreadUILanguage
WaitForMultipleObjects
CloseHandle
CreateProcessA
WriteConsoleOutputA
GetNumberOfConsoleInputEvents
SetTimeZoneInformation
RtlMoveMemory
SetComputerNameExW
ReadConsoleA
EscapeCommFunction
OpenFileMappingA
PurgeComm
CancelWaitableTimer
SetProcessWorkingSetSize
ReleaseMutex
ReadFileScatter
CreateNamedPipeA
GetPriorityClass
GetLastError
GetModuleFileNameA
MoveFileExA
RequestDeviceWakeup
FindFirstFileA
GetConsoleOutputCP
LockFileEx
CreateFileMappingA
GetFileType
lstrcpynA
SetFileAttributesA
GetPrivateProfileSectionA
ExitVDM
WaitForSingleObject
GetTickCount
GetConsoleMode
SetConsoleCP
GetThreadSelectorEntry
GetWriteWatch
dpmodemx
SPInit
advapi32
CredFree
user32
ActivateKeyboardLayout
ShowCaret
ReplyMessage
SwitchToThisWindow
LoadLocalFonts
EnableScrollBar
IsMenu
GetWindowDC
CallMsgFilter
CharPrevExA
SendInput
FlashWindow
CreateMDIWindowA
DlgDirSelectExA
GetClassInfoExA
GetWindow
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 765KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ