Static task
static1
Behavioral task
behavioral1
Sample
b06398e485d65d65e934f8327a87c71fa16a2ae138b67f34aec350b9e0039630.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b06398e485d65d65e934f8327a87c71fa16a2ae138b67f34aec350b9e0039630.exe
Resource
win10v2004-20220901-en
General
-
Target
b06398e485d65d65e934f8327a87c71fa16a2ae138b67f34aec350b9e0039630
-
Size
177KB
-
MD5
d492dbd4e03edd2140bbf2be0fe6348e
-
SHA1
6d5df74a4d00cd95b40376d18d2b2ca57c7f9588
-
SHA256
b06398e485d65d65e934f8327a87c71fa16a2ae138b67f34aec350b9e0039630
-
SHA512
b29820390000f11d54ac1613b90c8e83907ffcfb4382f6c883128cbf4e046f6773e9549a166bdaa5dac4163828cd8382e812bdd5f7d97e6011374b857f94a463
-
SSDEEP
3072:3M1DlXESCcG6Ic0oQ6bUf+G4AfSZA5CKyPHplHjWpHmLfnE8l:c1RXESg6IcDUWGFaaCDPHplHjWFQfE
Malware Config
Signatures
Files
-
b06398e485d65d65e934f8327a87c71fa16a2ae138b67f34aec350b9e0039630.exe windows x86
0385687fe2ce7f1c22ee97aeae789b52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleBaseNameW
advapi32
RegEnumValueW
RegCreateKeyExW
RegCreateKeyA
RegSetValueExA
RegDeleteKeyW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegDeleteValueW
ole32
IIDFromString
CoCreateInstance
kernel32
CreateDirectoryExA
VirtualQueryEx
lstrlenA
CreateEventW
LoadLibraryW
LoadLibraryExW
InterlockedCompareExchange
lstrlenW
RemoveDirectoryA
CopyFileW
HeapSetInformation
FindNextFileA
DeleteFileA
FindFirstFileA
LocalFree
LocalAlloc
EnumResourceNamesW
Heap32ListNext
lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesA
GetExitCodeThread
lstrcmpiW
CreateProcessW
lstrcmpiA
GetTempPathA
FindClose
SetFileAttributesA
DeleteFileW
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ