Static task
static1
Behavioral task
behavioral1
Sample
b1ce81bb0f8961f7ae9ae74942ba7f90dd9ff8f2bc3947f31cd84f0e7b686077.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b1ce81bb0f8961f7ae9ae74942ba7f90dd9ff8f2bc3947f31cd84f0e7b686077.exe
Resource
win10v2004-20220812-en
General
-
Target
b1ce81bb0f8961f7ae9ae74942ba7f90dd9ff8f2bc3947f31cd84f0e7b686077
-
Size
561KB
-
MD5
f83eef98217bd2161fe7a142856d13c4
-
SHA1
74876c6c925d2f62064a53ebd601c4919e5fbd14
-
SHA256
b1ce81bb0f8961f7ae9ae74942ba7f90dd9ff8f2bc3947f31cd84f0e7b686077
-
SHA512
c6b299419c18a6772fc75b8c4790814008b3801704d50f26cc6b2b5bc325cf974c825c0b8efe0842c9b689c8621a7313ed0586e0c6b503f1db03ed91cd6ad001
-
SSDEEP
12288:4HbqO/51a8VgIwzM2jCkbzP1OPGzxBJHf:fO/Pa8iXA2jCkbj1JZ
Malware Config
Signatures
Files
-
b1ce81bb0f8961f7ae9ae74942ba7f90dd9ff8f2bc3947f31cd84f0e7b686077.exe windows x86
66dc135db25b703f8772a929bb27f6e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CloseHandle
CreateFileA
Sleep
GetTickCount
VirtualAlloc
GetProcAddress
SetFirmwareEnvironmentVariableW
LoadLibraryA
CreateEventA
GetLastError
VirtualAllocEx
SetFilePointer
GetLocaleInfoA
RtlUnwind
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
SetStdHandle
ole32
CoCreateInstance
CoUninitialize
CoInitialize
msacm32
acmFilterEnumA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 436KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ