Static task
static1
Behavioral task
behavioral1
Sample
b4b292558f13e561b17bb9dce4387cf31385d18fe37eb9abdc5768a5bb2423de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4b292558f13e561b17bb9dce4387cf31385d18fe37eb9abdc5768a5bb2423de.exe
Resource
win10v2004-20221111-en
General
-
Target
b4b292558f13e561b17bb9dce4387cf31385d18fe37eb9abdc5768a5bb2423de
-
Size
60KB
-
MD5
dca006d958f908003e5e99d4b64cecf6
-
SHA1
8eb3014c442b5ea9c48776f568f56147e16f6d03
-
SHA256
b4b292558f13e561b17bb9dce4387cf31385d18fe37eb9abdc5768a5bb2423de
-
SHA512
41e6da4a6a16d19cc74653c03be628fedc7b425c7295712848ea3576009106db0fc57c3c11f6afd0958fa420648f5c9c507f0a662872144527ffea3ffa12fe73
-
SSDEEP
192:nD5tJHZN+uwvzRdtLx4ySQ6lSIocogKkU2ijgjUKmXLWpaW:DjJHb+nvVLx49MInVG5CRuWpaW
Malware Config
Signatures
Files
-
b4b292558f13e561b17bb9dce4387cf31385d18fe37eb9abdc5768a5bb2423de.exe windows x86
b39411b977cecc4a6d99983f89c2c8d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteFile
CloseHandle
GetProcAddress
GetCommandLineA
VirtualAlloc
GetLocalTime
GetVersionExA
SetCurrentDirectoryA
GetModuleHandleA
GetFileSize
ExitProcess
CreateThread
Sleep
LoadLibraryA
SetFilePointer
GetWindowsDirectoryA
CreateFileA
GetSystemTimeAsFileTime
DeleteFileA
user32
EnumChildWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
SetWindowPos
UpdateWindow
TranslateMessage
ShowWindow
RegisterClassA
PostQuitMessage
FindWindowA
LoadIconA
GetWindowTextA
GetMessageA
GetKeyState
GetKeyNameTextA
GetDlgItemTextA
GetDlgCtrlID
LoadCursorA
GetClassNameA
advapi32
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyA
RegCloseKey
Sections
CODE Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ