Static task
static1
Behavioral task
behavioral1
Sample
b3b75ed09c205e41c45b1b2b943e5926fd5a07ecb6e91dd6e3068d31ecb53d27.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3b75ed09c205e41c45b1b2b943e5926fd5a07ecb6e91dd6e3068d31ecb53d27.exe
Resource
win10v2004-20220901-en
General
-
Target
b3b75ed09c205e41c45b1b2b943e5926fd5a07ecb6e91dd6e3068d31ecb53d27
-
Size
40KB
-
MD5
6a5a6ad4345d2ad9e3508a71d8d8a0ab
-
SHA1
4801b7816f83f00b9a7aa0d78e189198dc1caec4
-
SHA256
b3b75ed09c205e41c45b1b2b943e5926fd5a07ecb6e91dd6e3068d31ecb53d27
-
SHA512
c5ab3815f4af35adc2e73a5d89e1fd04c0d31f7195d13a3f9388d4bb924727d640c7ef040d5732a02087289780c45aaf994a1cee8178ba1423b4fcfab59e296b
-
SSDEEP
768:6MRoDyGevrR07iSdl5v4frFn8Q65RaKDl:bSeDRyiSdnv4fB8RR1l
Malware Config
Signatures
Files
-
b3b75ed09c205e41c45b1b2b943e5926fd5a07ecb6e91dd6e3068d31ecb53d27.exe windows x86
1e1f56445accf12a12c9d6c310d15a01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetLastError
WinExec
ReleaseMutex
VirtualProtect
GetLocaleInfoA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetSystemInfo
advapi32
RegCreateKeyExA
RegCloseKey
RegSetValueExA
ws2_32
WSAStartup
socket
gethostbyname
htons
connect
recv
WSACleanup
send
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE