Static task
static1
Behavioral task
behavioral1
Sample
b0177289e248e38f80bbde1c451bea4d78b32f5c9924e62185bc1569e2680eeb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0177289e248e38f80bbde1c451bea4d78b32f5c9924e62185bc1569e2680eeb.exe
Resource
win10v2004-20220812-en
General
-
Target
b0177289e248e38f80bbde1c451bea4d78b32f5c9924e62185bc1569e2680eeb
-
Size
24KB
-
MD5
46b2f35e680388aa1742763b7b88bff9
-
SHA1
a8dbf2b5a8c937f1a9ba926c50de50aec6c4a765
-
SHA256
b0177289e248e38f80bbde1c451bea4d78b32f5c9924e62185bc1569e2680eeb
-
SHA512
54641e1b3a0410ec4d5d023e8d62dbfd45f65caf8fa1743e5523fca5629362ad686bcc7a1c19e22f424610df8c70a9eda899c6f6bf4a2cf5e54399a9d154e3eb
-
SSDEEP
192:UtKjbBKNfQDLAm8Z5E2f2ANNNNNNNNNNNNzsal+NHNNEDO6PKOAkJOVn8LkTOdKI:5TXAm8Z5z+Y+mC6VNwUKmRejvGa8CM
Malware Config
Signatures
Files
-
b0177289e248e38f80bbde1c451bea4d78b32f5c9924e62185bc1569e2680eeb.exe windows x86
0fee271aa609cb1cd736d14c45ccd0ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
CreateMailslotA
RemoveDirectoryA
WriteFile
CreateEventA
SetStdHandle
ExitThread
FindClose
GetVersion
IsBadCodePtr
ResetEvent
lstrlenA
VirtualProtectEx
FindAtomA
GetFileType
ReleaseMutex
SetEvent
HeapFree
FindClose
SetVolumeLabelW
CreateDirectoryA
GetCommandLineA
GetModuleHandleA
GetSystemTime
WriteConsoleW
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
rasmxs
DeviceEnum
DeviceEnum
DeviceEnum
DeviceEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ