Static task
static1
Behavioral task
behavioral1
Sample
b02e03e62d1f4f7d05bfafd34e62b41b4f38dd69ced0965f48a246205c6c1e95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b02e03e62d1f4f7d05bfafd34e62b41b4f38dd69ced0965f48a246205c6c1e95.exe
Resource
win10v2004-20220812-en
General
-
Target
b02e03e62d1f4f7d05bfafd34e62b41b4f38dd69ced0965f48a246205c6c1e95
-
Size
200KB
-
MD5
bc30365fe0baee802057d53fb5a9c08d
-
SHA1
0185de22982ab6150fed7635b719b429b8f881e8
-
SHA256
b02e03e62d1f4f7d05bfafd34e62b41b4f38dd69ced0965f48a246205c6c1e95
-
SHA512
29ff63dea62a9e6ae7cc152f8836b8428c4184b097a7d1002f244b79a42899487d607d26fd4111036d94690988caca14c1a9786219704971a3f9699f7b58b3f8
-
SSDEEP
6144:FcR5t+M35xvtTWuzIq4gHMwekBE6NLthJfrhBpr:G5J35XTZcq4gHM81lf5
Malware Config
Signatures
Files
-
b02e03e62d1f4f7d05bfafd34e62b41b4f38dd69ced0965f48a246205c6c1e95.exe windows x86
3de4abaf511158ebffa675582170b422
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA
user32
CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
advapi32
RegCreateKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegDeleteValueA
RegEnumValueA
Sections
.text Size: 180KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ