Static task
static1
Behavioral task
behavioral1
Sample
b3fff94660c0e6eb992f02cf84365ea661e01e0295effd647f8cf1b22a0db1d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3fff94660c0e6eb992f02cf84365ea661e01e0295effd647f8cf1b22a0db1d0.exe
Resource
win10v2004-20221111-en
General
-
Target
b3fff94660c0e6eb992f02cf84365ea661e01e0295effd647f8cf1b22a0db1d0
-
Size
317KB
-
MD5
8d57cbc04e9c8acb773ac0c2805e7e82
-
SHA1
633b1fdba71e74a80900957af8acaaeeb9bcd338
-
SHA256
b3fff94660c0e6eb992f02cf84365ea661e01e0295effd647f8cf1b22a0db1d0
-
SHA512
afab16caa8bffda2e727d8579d5209ce2e5909b387ab5719b973c274bcbd00d20cd895536dba9b2f293770de6bd919d059d16e1c7c1fca40f9f960d9a03c52c7
-
SSDEEP
6144:0/i1UZvfVobjP/nI3cgfpS9oLw74F2ezIwPk8C2hGZMYYy:0EUZvdkbI3ccS/E2ezIwc8nYYy
Malware Config
Signatures
Files
-
b3fff94660c0e6eb992f02cf84365ea661e01e0295effd647f8cf1b22a0db1d0.exe windows x86
25c10713e15cd16f31dfdb95abcaecbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
EnterCriticalSection
GetLocaleInfoA
VirtualProtect
FileTimeToLocalFileTime
GlobalFree
CloseHandle
LoadLibraryExA
InterlockedExchange
LockResource
SetConsoleOutputCP
GetLastError
GetStdHandle
HeapCreate
GetDriveTypeA
GlobalDeleteAtom
Sleep
RaiseException
SetErrorMode
GetACP
GlobalAddAtomA
user32
SetForegroundWindow
GetWindow
GetParent
GetFocus
DrawEdge
ClipCursor
ShowWindow
OemToCharA
GetMenuItemInfoA
GetActiveWindow
ReleaseDC
GetCursorPos
DrawTextA
BeginPaint
GetWindowTextA
IsIconic
EndPaint
ValidateRect
GetClassNameA
ntdsapi
DsCrackNamesA
DsIsMangledDnA
DsBindA
DsFreeNameResultA
DsGetSpnA
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ