Static task
static1
Behavioral task
behavioral1
Sample
b9acfd80a7ed38fbca01d84dd32487b462b53878baaa4b5b4b7ec517f335b706.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b9acfd80a7ed38fbca01d84dd32487b462b53878baaa4b5b4b7ec517f335b706.exe
Resource
win10v2004-20220901-en
General
-
Target
b9acfd80a7ed38fbca01d84dd32487b462b53878baaa4b5b4b7ec517f335b706
-
Size
747KB
-
MD5
7ab1eed21f7073568fcab3b093a48130
-
SHA1
15c471c038cb839c1627d73a1aed91b227c94940
-
SHA256
b9acfd80a7ed38fbca01d84dd32487b462b53878baaa4b5b4b7ec517f335b706
-
SHA512
0e0b0c044b634a6103dff0f0ba9c4a55ad8fd01be20debd3a239619cf4ec5f6a170b3f131f594aafa25e7c9a731434ca6185bc697b9aee657df39f1ba374a05a
-
SSDEEP
12288:q+VCBX0Duloh+R9YHZv38188NxBuAuR6MdgnM/0ap3orjh9ieqsji0jRGF8+u:qiIX0DaH7YFI8YxMAuRdgnMLyio/RQu
Malware Config
Signatures
Files
-
b9acfd80a7ed38fbca01d84dd32487b462b53878baaa4b5b4b7ec517f335b706.exe windows x86
139b090c657bda32dabc9de167e7615e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetCommandLineW
GetTickCount
GetStartupInfoW
SetEvent
OpenProcess
HeapSize
ExitProcess
FindClose
CreateMutexA
CreateFileA
ResetEvent
RemoveDirectoryA
WaitForSingleObject
CloseHandle
GetStdHandle
GetFileAttributesA
DeleteFileA
VirtualAllocEx
GetModuleHandleA
GetEnvironmentVariableW
user32
GetDC
DispatchMessageW
GetSysColor
FindWindowW
GetWindowLongA
PeekMessageA
DispatchMessageW
GetClassInfoA
GetDC
MessageBoxA
GetDC
FillRect
CallWindowProcW
perfctrs
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ