Static task
static1
Behavioral task
behavioral1
Sample
b00695bfc038c61db7ae41745bc49f56b33c302537750a964597ce21a1f4b5ea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b00695bfc038c61db7ae41745bc49f56b33c302537750a964597ce21a1f4b5ea.exe
Resource
win10v2004-20220901-en
General
-
Target
b00695bfc038c61db7ae41745bc49f56b33c302537750a964597ce21a1f4b5ea
-
Size
802KB
-
MD5
3dda6ef0184143226f6d1feea4a0410d
-
SHA1
1a1889409b5cec864b717d662f6a59be29af78cc
-
SHA256
b00695bfc038c61db7ae41745bc49f56b33c302537750a964597ce21a1f4b5ea
-
SHA512
9e8c01d29834b25512bbdc3066b53e5911ffd08f8a49c701d9ae678a2f77d5bb6c83a48800fc4d0537bbf1bba650973299a92cc8cd96ca6217c42ba896add9b2
-
SSDEEP
24576:RE56kmMHkkBR8E3yMcvrUOpJdqH2cG1vA:RE56aEkBQTTUOpJdqH2cG1v
Malware Config
Signatures
Files
-
b00695bfc038c61db7ae41745bc49f56b33c302537750a964597ce21a1f4b5ea.exe windows x86
26b3a9421cddd8b084d7ff1371578fb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetModuleFileNameA
PulseEvent
CreateFileW
HeapDestroy
GetVolumePathNameA
GetProcessVersion
VirtualProtectEx
GetDriveTypeW
LeaveCriticalSection
InterlockedExchange
GetFileAttributesA
GetProcessHeap
GetModuleHandleA
SetFilePointer
CreateDirectoryA
GetCurrentThreadId
GlobalFlags
DeleteFileW
SetFileTime
CreateFileW
FindAtomW
OpenEventA
GetConsoleMode
OpenMutexA
user32
DestroyMenu
MessageBoxA
SetFocus
wsprintfA
GetWindowLongA
SetRect
GetWindowLongA
DispatchMessageA
GetWindowTextA
DestroyIcon
IsMenu
PeekMessageA
LoadCursorA
dot3msm
DllMain
Dot3MsmDisconnect
Dot3MsmDeInit
Dot3MsmFreeProfile
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE