Static task
static1
Behavioral task
behavioral1
Sample
b06c5064575383721586a00333f7180ee862698e634139dd59660fb6128ffc1c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b06c5064575383721586a00333f7180ee862698e634139dd59660fb6128ffc1c.exe
Resource
win10v2004-20221111-en
General
-
Target
b06c5064575383721586a00333f7180ee862698e634139dd59660fb6128ffc1c
-
Size
317KB
-
MD5
96cf7cab6d91b80182ee9a2a72847952
-
SHA1
46bd4abfe30139b9af8d071d4d34547d11f137de
-
SHA256
b06c5064575383721586a00333f7180ee862698e634139dd59660fb6128ffc1c
-
SHA512
8ce790adea48edea054b8a7fbea039459be6f50312deb667bc539413994ec39530a2baa1cc7d8253e4e9fb6b9deca0366c58bc9a582424e164a012a2de6e79ff
-
SSDEEP
6144:KuQ4p5rptVLMztkVwZcl2OzZ+hz06PiAsJXtfvWt73+mBGDbDvDhwufZIH:KuQ4xtVLNV8GZmz1PiAsJ2+bDv1fZIH
Malware Config
Signatures
Files
-
b06c5064575383721586a00333f7180ee862698e634139dd59660fb6128ffc1c.exe windows x86
377dfbd89d24fe2517ce65bf0b8fec9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
WaitForSingleObject
GetACP
FreeConsole
GetCommandLineA
GlobalSize
VirtualProtect
InterlockedExchange
ResumeThread
GetModuleHandleA
HeapCreate
GetSystemTime
lstrlenA
IsDebuggerPresent
PeekConsoleInputA
GlobalMemoryStatus
GetUserDefaultLCID
GetTimeFormatA
LoadLibraryExA
GetCurrentProcessId
GetTapeStatus
user32
EndPaint
GetClassNameA
FrameRect
GetWindow
FillRect
GetDC
GetTitleBarInfo
GetParent
SetForegroundWindow
AnyPopup
CreateIcon
GetCursorPos
wsprintfA
DrawTextA
ShowWindow
BeginPaint
DragDetect
GetFocus
ReleaseDC
ntshrui
DllGetClassObject
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsFolderPrivateForUser
SetFolderPermissionsForSharing
hnetcfg
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ