Static task
static1
Behavioral task
behavioral1
Sample
b64bf03782e21aee743728eada6ce414a44170d552882e52f7d730b17c39a83f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b64bf03782e21aee743728eada6ce414a44170d552882e52f7d730b17c39a83f.exe
Resource
win10v2004-20220812-en
General
-
Target
b64bf03782e21aee743728eada6ce414a44170d552882e52f7d730b17c39a83f
-
Size
8KB
-
MD5
8cd33632cd9c148faa3971c758a7a970
-
SHA1
818729c803c89353382c8a4ff9ff18649fa06492
-
SHA256
b64bf03782e21aee743728eada6ce414a44170d552882e52f7d730b17c39a83f
-
SHA512
93d2d9906f569bae7eddc6fc7a276ad82d75c3e02ba43a6443e30b184654dc2e9b37e5be87d313299657eadd9f38fc0ee0ab288714d2d8239cccb19aa99b05b9
-
SSDEEP
96:tZzReZhbHT95Cff9V7xGKZ2T+EW9raZuOpFmHHXbCmq/Snd0kEvn:tZz6hbJ5CfLsKrEWEZuBnmmiSnd0kE/
Malware Config
Signatures
Files
-
b64bf03782e21aee743728eada6ce414a44170d552882e52f7d730b17c39a83f.exe windows x86
a29bfa2c09792b551d842a724030ca67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetVolumeInformationA
GetThreadLocale
LocalHandle
CompareStringA
GetProcessHeap
SetEvent
VirtualAlloc
LoadResource
GetPriorityClass
ReleaseMutex
GetOEMCP
TlsFree
GlobalFindAtomA
GetConsoleCP
CreateThread
TlsGetValue
GetModuleHandleA
GetStdHandle
GetUserDefaultLangID
OpenSemaphoreA
user32
GetFocus
GetWindowTextA
GetClassInfoExA
DrawTextExA
GetClassNameA
ReleaseDC
GetActiveWindow
IsWindowVisible
CloseWindow
ValidateRect
GetForegroundWindow
IsIconic
InvalidateRect
GetSystemMetrics
ShowWindow
GetWindow
GetWindowTextLengthA
GetDC
RegisterClassA
shell32
SHBrowseForFolderA
SHChangeNotify
SHGetFileInfoA
SHGetMalloc
SHGetFolderPathA
userenv
LoadUserProfileA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ