Static task
static1
Behavioral task
behavioral1
Sample
b18d5e026fcb38dc2e29103079cbfabcf3a64b6ea42f416754b9b97c8c2bc412.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b18d5e026fcb38dc2e29103079cbfabcf3a64b6ea42f416754b9b97c8c2bc412.exe
Resource
win10v2004-20221111-en
General
-
Target
b18d5e026fcb38dc2e29103079cbfabcf3a64b6ea42f416754b9b97c8c2bc412
-
Size
365KB
-
MD5
99bb5a7b1bde45dc9bb023c764e6a77f
-
SHA1
3520822e4acd38c950dabaa2bd8289e3b6889c69
-
SHA256
b18d5e026fcb38dc2e29103079cbfabcf3a64b6ea42f416754b9b97c8c2bc412
-
SHA512
02e246ebac4790135d43b5227dcb880c298587a6563cc853d2d50e626d30758e417cf0ee3f87d8da10e4c860ddaa46362325ba6166c76327c599ad52a7c97190
-
SSDEEP
6144:/YCHjdBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEoV:/YS/5j3CcxR0e7Uc7MOJIP1WGzUdNiCv
Malware Config
Signatures
Files
-
b18d5e026fcb38dc2e29103079cbfabcf3a64b6ea42f416754b9b97c8c2bc412.exe windows x86
c36f5fb3d5d5e88f80f4504e06d9b436
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
LoadLibraryA
GlobalFree
CloseHandle
ReleaseMutex
PulseEvent
HeapCreate
FindClose
DeleteAtom
ExitThread
GetEnvironmentVariableA
SetLastError
GetACP
GlobalUnlock
CreateFileA
TlsGetValue
FindResourceA
GetTickCount
GetModuleHandleA
CreateMutexA
user32
DefWindowProcW
CheckRadioButton
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
FillRect
DrawMenuBar
SetFocus
GetIconInfo
CopyRect
IsWindow
msasn1
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecCheck
dpnet
DirectPlay8Create
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ