Static task
static1
Behavioral task
behavioral1
Sample
b819d27f995b9df9056d3f03872839eb3435c5231f199c10641500e8e86b747b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b819d27f995b9df9056d3f03872839eb3435c5231f199c10641500e8e86b747b.exe
Resource
win10v2004-20221111-en
General
-
Target
b819d27f995b9df9056d3f03872839eb3435c5231f199c10641500e8e86b747b
-
Size
948KB
-
MD5
36303b7f0a740e0e4d2b66af9db846f0
-
SHA1
53998e8e0ab4f934d0f9d009d95a342ce99ab4d1
-
SHA256
b819d27f995b9df9056d3f03872839eb3435c5231f199c10641500e8e86b747b
-
SHA512
136b9ecc909d07dddbf344569b9278a4a035a653ba29a75a04ee98e0f8cbd8c8cbef5fae0b3581ca17e45a1597419f6f64c6a9e62497dcbea2a0faceb1ac8b5c
-
SSDEEP
24576:1/A3lP+ppMGXWlcrm0JvKsFUcJA0U+vRL/mgsiLKTHlNXss:a8HWNQPFrUgs+KrzD
Malware Config
Signatures
Files
-
b819d27f995b9df9056d3f03872839eb3435c5231f199c10641500e8e86b747b.exe windows x86
cf670a7afbca67c2582e4697a77f7d20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegQueryValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoCreateInstance
comctl32
ImageList_SetIconSize
Sections
.text Size: 27KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE